| # touch_fusion | |
| type touch_fusion, domain, device_domain_deprecated; | |
| type touch_fusion_exec, exec_type, file_type; | |
| # Why net_admin? | |
| allow touch_fusion self:capability { net_admin sys_nice }; | |
| allow touch_fusion graphics_device:dir r_dir_perms; | |
| allow touch_fusion graphics_device:chr_file r_file_perms; | |
| allow touch_fusion kmsg_device:chr_file { w_file_perms getattr }; | |
| allow touch_fusion self:netlink_socket create_socket_perms_no_ioctl; |