allow domain kernel:system module_request;
allow domain log_device:chr_file { read write open };
allow domain log_device:dir search;