1allow hal_fingerprint_default sysfs_fingerprint:dir r_dir_perms; 2allow hal_fingerprint_default sysfs_fingerprint:file rw_file_perms; 3allow hal_fingerprint_default tee_device:chr_file rw_file_perms; 4allow hal_fingerprint_default uhid_device:chr_file rw_file_perms; 5allow hal_fingerprint_default sysfs:dir { open read }; 6 7# TODO(b/36644492): Remove data_between_core_and_vendor_violators once 8# hal_fingerprint no longer directly accesses fingerprintd_data_file. 9typeattribute hal_fingerprint_default data_between_core_and_vendor_violators; 10# access to /data/system/users/[0-9]+/fpdata 11allow hal_fingerprint_default fingerprintd_data_file:file create_file_perms; 12allow hal_fingerprint_default fingerprintd_data_file:dir rw_dir_perms; 13