# system_server.te allow system_server proc_last_kmsg:file r_file_perms;