sepolicy/vendor/kernel.te

# for diag over socket
userdebug_or_eng(`
  allow kernel self:socket create;
  allow kernel debugfs_wlan:dir search;
')

allow kernel vendor_firmware_file:dir search;
allow kernel vendor_firmware_file:file r_file_perms;
allow kernel vendor_firmware_file:lnk_file read;

dontaudit kernel kernel:system module_request;

allow kernel debugfs_ipc:dir search;
allow kernel persist_file:dir search;