1 allow untrusted_app { 2 mali_device 3 hi_tde_device 4 hi_gfx2d_device }:chr_file rw_file_perms; 5 6 allow untrusted_app { audio_device 7 graphics_device 8 input_device 9 block_device 10 apk_private_data_file 11 asec_image_file 12 property_data_file 13 drm_data_file 14 media_data_file 15 install_data_file 16 fscklogs 17 backup_data_file 18 usb_device 19 tombstone_data_file }:dir { getattr read search }; 20 21 allow untrusted_app hi_userdata_block_device:blk_file { getattr }; 22 allow untrusted_app fs_bpf:dir { add_name search write }; 23 allow untrusted_app block_device:{ dir blk_file } { getattr }; 24 allow untrusted_app mali_device:chr_file { getattr ioctl open read write }; 25 allow untrusted_app pstorefs:dir { search }; 26 allow untrusted_app proc_modules:file { read }; 27 allow untrusted_app sysfs_kernel_notes:file { read }; 28 allow untrusted_app hi_vfmw_device:chr_file { write read open ioctl }; 29
