1allow dumpstate sysfs_virtio_block:file r_file_perms; 2allow dumpstate debugfs:dir { open read }; 3allow dumpstate mnt_media_rw_file:dir { getattr open read }; 4#allow dumpstate varrun_file:dir { search getattr open read }; 5 6dontaudit dumpstate kernel:system module_request; 7 8dontaudit dumpstate device:file { open write }; 9allow dumpstate nsfs:file getattr; 10dontaudit dumpstate varrun_file:dir search; 11allow dumpstate vold:binder call; 12dontaudit dumpstate apexd:binder call; 13