type pvrsrvctl, domain; type pvrsrvctl_exec, exec_type, file_type; init_daemon_domain(pvrsrvctl) allow pvrsrvctl self:capability sys_admin; allow pvrsrvctl gpu_device:chr_file rw_file_perms;