type xcap, domain; type xcap_exec, exec_type, file_type, vendor_file_type; init_daemon_domain(xcap) allow xcap ccci_device:chr_file rw_file_perms; allow xcap self:capability sys_admin;