Policy set in the kernel

------------------------------------------
Domain Name: pluginDom
------------------------------------------
-a pluginObj file_read grant
-a secpolicyObj file_read grant
-a swMgmtObj file_read grant


-c inet_dgram_socket_create grant
-c inet_stream_socket_create grant
-c unix_dgram_socket_bind grant
-c unix_socket_create grant
-c unix_stream_socket_bind grant


-p inet_socket_connect nonloopback grant
-p inet_socket_connect loopback grant


-s genericSys grant
-s ioctlSys grant
-s vsiReadSys grant
-s vsiWriteSys grant
-s moduleSys grant
-s signalsSys grant
-s killSys grant
-s sysctlSys grant
-s syncSys grant
-s forkSys grant
-s execSys grant



------------------------------------------
Domain Name: pluginFrameworkDom
------------------------------------------
-a pluginObj file_read grant
-a swMgmtObj file_read grant


-c inet_dgram_socket_create grant
-c inet_stream_socket_create grant
-c unix_dgram_socket_bind grant
-c unix_socket_create grant
-c unix_stream_socket_bind grant


-d pluginObj pluginDom file_mmap_exec grant
-d swMgmtObj swMgmtDom file_mmap_exec grant


-p inet_socket_bind all grant
-p inet_socket_connect nonloopback grant
-p inet_socket_connect loopback grant


-s genericSys grant
-s ioctlSys grant
-s adminSys grant
-s vsiReadSys grant
-s vsiWriteSys grant
-s signalsSys grant
-s killSys grant
-s sysctlSys grant
-s syncSys grant
-s execSys grant



------------------------------------------
Domain Name: swMgmtDom
------------------------------------------
-a pluginObj file_create grant
-a pluginObj file_delete grant
-a pluginObj file_read grant
-a pluginObj file_write grant
-a secpolicyObj file_create grant
-a secpolicyObj file_delete grant
-a secpolicyObj file_read grant
-a secpolicyObj file_write grant
-a swMgmtObj file_create grant
-a swMgmtObj file_delete grant
-a swMgmtObj file_read grant
-a swMgmtObj file_write grant


-c inet_dgram_socket_create grant
-c inet_stream_socket_create grant
-c unix_socket_create grant


-p inet_socket_connect nonloopback grant
-p inet_socket_connect loopback grant


-s genericSys grant
-s vmkacSys grant
-s fsSys grant
-s ioctlSys grant
-s adminSys grant
-s vsiReadSys grant
-s vsiWriteSys grant
-s moduleSys grant
-s signalsSys grant
-s killSys grant
-s sysctlSys grant
-s syncSys grant
-s schedulerSys grant
-s forkSys grant
-s execSys grant



