| type sensortool, domain; | |
| type sensortool_exec, exec_type, file_type; | |
| init_daemon_domain(sensortool) | |
| # STOPSHIP: all domains must be in enforcing mode | |
| permissive sensortool; | |
| allow sensortool self:capability sys_nice; | |
| allow sensortool sensors_device:chr_file rw_file_perms; | |
| create_pty(sensortool) |