1 # Access to /dev/tee 2 allow hal_fingerprint tee_device:chr_file rw_file_perms; 3 4 # Read to /dev/input 5 allow hal_fingerprint input_device:dir r_dir_perms; 6 allow hal_fingerprint input_device:chr_file r_file_perms; 7 8 # for SW20.6 navigation 9 allow hal_fingerprint uhid_device:chr_file rw_file_perms; 10 11 # read clk_enable and wakeup_enable in /sys/devices/soc.0/f9966000.spi_fpc/ 12 allow hal_fingerprint sysfs_devices_fingerprint:dir r_dir_perms; 13 allow hal_fingerprint sysfs_devices_fingerprint:file rw_file_perms; 14 15 # allow access to /persist 16 allow hal_fingerprint persist_file:dir search; 17 18 # allow access to sysfs files 19 r_dir_file(hal_fingerprint, sysfs_type) 20