1allow hal_graphics_allocator_default graphics_device:dir search; 2allow hal_graphics_allocator_default graphics_device:chr_file { ioctl open read write map rw_file_perms }; 3allow hal_graphics_allocator_default gpu_device:dir search; 4allow hal_graphics_allocator_default gpu_device:chr_file { ioctl open read write map rw_file_perms }; 5allow hal_graphics_allocator_default dumpstate:fd use; 6allow hal_graphics_allocator_default dumpstate:fifo_file write; 7allow hal_graphics_allocator_default self:vsock_socket create_socket_perms_no_ioctl; 8