type kickstart, domain;
permissive kickstart;
type kickstart_exec, file_type, exec_type;
domain_auto_trans(init, kickstart_exec, kickstart)

# XXX Everything bad happens here.
allow kickstart kickstart_exec:file rx_file_perms;
allow kickstart sdcard_external:file r_file_perms;
allow kickstart sdcard_external:dir search;
allow kickstart shell_exec:file rx_file_perms;
allow kickstart system_file:file x_file_perms;
allow kickstart system_data_file:file { create_file_perms rwx_file_perms };
allow kickstart system_data_file:dir { write  add_name };

allow kickstart block_device:blk_file rw_file_perms;
allow kickstart kickstart_device:chr_file rw_file_perms;
allow kickstart block_device:dir rw_dir_perms;

allow kickstart radio_device:chr_file rw_file_perms;
allow kickstart sysfs:file append;