1 binder_service(fingerprintd) 2 3 # Access to /dev/tee 4 allow fingerprintd tee_device:chr_file rw_file_perms; 5 6 # Read to /dev/input 7 allow fingerprintd input_device:dir r_dir_perms; 8 allow fingerprintd input_device:chr_file r_file_perms; 9 10 # read clk_enable and wakeup_enable in /sys/devices/soc.0/f9966000.spi_fpc/ 11 allow fingerprintd sysfs_devices_fingerprint:dir r_dir_perms; 12 allow fingerprintd sysfs_devices_fingerprint:file rw_file_perms; 13 14 # allow access to /persist 15 allow fingerprintd persist_file:dir search; 16