#============= kernel ==============
allow kernel vendor_file:file open;
allow kernel vendor_file:file read;
allow kernel self:system module_request;
allow vendor_init kernel:system module_request;