1 allow shell rootfs:file { getattr read open }; 2 allow shell vendor_file:file { execute getattr open read execute_no_trans }; 3 # allow shell vendor_toolbox_exec:file { execute getattr }; 4 allow shell sysfs_hisi:file { getattr read open}; 5
