1 allow untrusted_app_27 mali_device:chr_file { open read getattr write }; 2 allow untrusted_app_27 mali_device:chr_file { ioctl }; 3 allow untrusted_app_27 block_device:{ dir blk_file } { getattr }; 4 allow untrusted_app_27 net_dns_prop:file { open }; 5 allow untrusted_app_27 hi_vfmw_device:chr_file { open read write }; 6