1allow ephemeral_app mali_device:chr_file { ioctl getattr open read write }; 2allow ephemeral_app self:process { ptrace }; 3allow ephemeral_app hi_vfmw_device:chr_file { read write }; 4allow ephemeral_app shell_data_file:dir { search }; 5 6