type sensortool, domain; type sensortool_exec, exec_type, file_type; init_daemon_domain(sensortool) allow sensortool sensors_device:chr_file rw_file_perms; allow sensortool self:capability { dac_override sys_nice }; allow sensortool persist_file:dir search; allow sensortool persist_sensortool_file:file r_file_perms;