1 allow hal_drm_default mmz_userdev_device:chr_file { ioctl open read write }; 2 allow hal_drm_default debugfs_trace_marker:file { open write }; 3 allow hal_drm_default vndbinder_device:chr_file { open read write ioctl }; 4 allow hal_drm_default vendor_data_file:dir { write add_name create open read }; 5 allow hal_drm_default vendor_data_file:file { create read write open getattr}; 6 #allow hal_drm_default system_data_file:dir { write }; 7