type rk_wifi_hal, domain;
type rk_wifi_hal_exec, exec_type, vendor_file_type, file_type;

init_daemon_domain(rk_wifi_hal)
allow rk_wifi_hal vendor_file:system module_load;
allow rk_wifi_hal proc_net:file { getattr open read };
allow rk_wifi_hal proc_version:file { open read };
allow rk_wifi_hal sysfs:dir { read open };
allow rk_wifi_hal sysfs:file rw_file_perms;
allow rk_wifi_hal proc_modules:file { read open getattr };
dontaudit rk_wifi_hal wifi_data_file:dir { search };
allow rk_wifi_hal kernel:system module_request;
dontaudit rk_wifi_hal self:capability { dac_override };
allow rk_wifi_hal self:capability sys_module;