allow init vfat:file { read open }; allow init socket_device:sock_file { create setattr unlink }; domain_trans(init, rootfs, dashd)