1get_prop(vold, vendor_tee_listener_prop) 2 3allow vold sysfs_scsi_devices_0000:file w_file_perms; 4allow vold sysfs_scsi_devices_other:file w_file_perms; 5allow vold sysfs_devices_block:file write; 6 7# allow vold to trim /mnt/vendor/persist by sending ioctl FITRIM 8allow vold persist_file:dir { ioctl open read }; 9 10# generated by proc scan, unnecessary 11dontaudit vold proc_irq:dir read; 12