1allow untrusted_app_25 mali_device:chr_file { getattr ioctl open read write }; 2allow untrusted_app_25 block_device:{ dir blk_file } { getattr }; 3allow untrusted_app_25 hi_vfmw_device:chr_file { write read open ioctl }; 4 5