# CellGuard SELinux rules.
# KernelSU-Next usually flips SELinux to permissive, but these let the
# module coexist with enforcing mode too.

# Shannon / modem AT channels
allow su umts_device chr_file { open read write ioctl getattr }
allow su radio_device chr_file { open read write ioctl getattr }

# Our own /dev/cellguard char device
allow su device chr_file { open read write ioctl getattr }

# Insmod / rmmod
allow su kernel system { module_load module_request }
allow su self capability sys_module

# /proc/cellguard/*
allow su proc file { open read getattr }