1allow shell rootfs:file { getattr read open }; 2allow shell vendor_file:file { execute getattr open read execute_no_trans }; 3# allow shell vendor_toolbox_exec:file { execute getattr }; 4allow shell sysfs_hisi:file { getattr read open}; 5