1 allow platform_app mali_device:chr_file { getattr ioctl open read write }; 2 allow platform_app hi_vfmw_device:chr_file { write read open ioctl getattr}; 3 allow platform_app hi_overlay_file:file { read open getattr }; 4