1 get_prop(vold, vendor_tee_listener_prop) 2 3 allow vold sysfs_devices_block:file write; 4 allow vold sysfs_mmc:file write; 5 6 # allow vold to trim /mnt/vendor/persist by sending ioctl FITRIM 7 allow vold persist_file:dir { ioctl open read }; 8 9 # generated by proc scan, unnecessary 10 dontaudit vold proc_irq:dir read; 11