1 allow ephemeral_app mali_device:chr_file { ioctl getattr open read write }; 2 allow ephemeral_app self:process { ptrace }; 3 allow ephemeral_app hi_vfmw_device:chr_file { read write }; 4 allow ephemeral_app shell_data_file:dir { search }; 5 6