1type ufs_firmware_update, domain; 2type ufs_firmware_update_exec, vendor_file_type, exec_type, file_type; 3 4init_daemon_domain(ufs_firmware_update) 5 6allow ufs_firmware_update vendor_toolbox_exec:file execute_no_trans; 7allow ufs_firmware_update block_device:dir r_dir_perms; 8allow ufs_firmware_update fips_block_device:blk_file rw_file_perms; 9allow ufs_firmware_update sysfs:dir r_dir_perms; 10allow ufs_firmware_update sysfs_scsi_devices_0000:file r_file_perms; 11