sepolicy/system_server.te

allow system_server { knv_device }:chr_file rw_file_perms;
allow system_server sysfs_devices_system_cpu:file w_file_perms;
allow system_server elan_ip_device:chr_file rw_file_perms;
allow system_server diag_device:chr_file rw_file_perms;