allow hal_light_default sysfs:file { open getattr write };
dontaudit hal_light_default vendor_file:file execute_no_trans;