type pq_init, domain; type pq_init_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(pq_init) allow pq_init vendor_data_file:dir { read open write getattr create add_name }; allow pq_init vendor_data_file:file { read open write create getattr }; allow pq_init sysfs:file { read }; allow pq_init sysfs_dev:file { read open }; allow pq_init device:dir { search open read }; allow pq_init gpu_device:chr_file { open read write getattr ioctl map };