allow thermal-engine thermal_data_file:dir rw_dir_perms; allow thermal-engine thermal_data_file:file create_file_perms; allow thermal-engine self:capability { chown fowner }; dontaudit thermal-engine self:capability dac_override; set_prop(thermal-engine, thermal_engine_prop);