shared/sepolicy/gce_fs_monitor.te

type gce_fs_monitor, domain;
type gce_fs_monitor_exec, exec_type, vendor_file_type, file_type;

init_daemon_domain(gce_fs_monitor)

# Write to kernel log (/dev/kmsg)
allow gce_fs_monitor kmsg_device:chr_file w_file_perms;