| type init-angler-qseecomd-sh, domain; | |
| type init-angler-qseecomd-sh_exec, exec_type, file_type; | |
| init_daemon_domain(init-angler-qseecomd-sh) | |
| allow init-angler-qseecomd-sh shell_exec:file rx_file_perms; | |
| # execute toybox/toolbox | |
| allow init-angler-qseecomd-sh toolbox_exec:file rx_file_perms; |