# insmod LKM under /odm or /vendor | |
allow init self:capability sys_module; | |
allow init system_file:system module_load; | |
# boot process denial clean up | |
allow init debugfs_tracing:dir write; | |
allow init debugfs_tracing:file write; | |
allow init sysfs_devices_system_cpu:file relabelfrom; |