1allow insmod-sh self:capability sys_nice; 2allow insmod-sh kernel:process setsched; 3allow insmod-sh vendor_regmap_debugfs:dir search; 4dontaudit insmod-sh insmod-sh:key write; 5