allow init su_exec:file execute_no_trans;
allow init firmware_file:dir search;