allow insmod-sh self:capability sys_nice;
allow insmod-sh kernel:process setsched;

dontaudit insmod-sh proc_cmdline:file r_file_perms;

allow insmod-sh debugfs_mgm:dir search;
allow insmod-sh vendor_regmap_debugfs:dir search;