1allow untrusted_app { 2 mali_device 3 hi_tde_device 4 hi_gfx2d_device }:chr_file rw_file_perms; 5 6allow untrusted_app { audio_device 7 graphics_device 8 input_device 9 block_device 10 apk_private_data_file 11 asec_image_file 12 property_data_file 13 drm_data_file 14 media_data_file 15 install_data_file 16 fscklogs 17 backup_data_file 18 usb_device 19 tombstone_data_file }:dir { getattr read search }; 20 21allow untrusted_app hi_userdata_block_device:blk_file { getattr }; 22allow untrusted_app fs_bpf:dir { add_name search write }; 23allow untrusted_app block_device:{ dir blk_file } { getattr }; 24allow untrusted_app mali_device:chr_file { getattr ioctl open read write }; 25allow untrusted_app pstorefs:dir { search }; 26allow untrusted_app proc_modules:file { read }; 27allow untrusted_app sysfs_kernel_notes:file { read }; 28allow untrusted_app hi_vfmw_device:chr_file { write read open ioctl }; 29