type_transition thermal-engine socket_device:sock_file thermal_socket "thermal-send-client"; type_transition thermal-engine socket_device:sock_file thermal_socket "thermal-recv-client"; type_transition thermal-engine socket_device:sock_file thermal_socket "thermal-recv-passive-client"; allow thermal-engine self:capability chown;