1get_prop(hal_fingerprint_default, hwservicemanager_prop) 2allow hal_fingerprint_default fwk_stats_hwservice:hwservice_manager find; 3binder_call(hal_fingerprint_default, statsd) 4 5allow hal_fingerprint_default sysfs_fingerprint:dir r_dir_perms; 6allow hal_fingerprint_default sysfs_fingerprint:file rw_file_perms; 7allow hal_fingerprint_default sysfs_msm_subsys:dir search; 8allow hal_fingerprint_default sysfs_msm_subsys:file r_file_perms; 9allow hal_fingerprint_default tee_device:file rw_file_perms; 10allow hal_fingerprint_default tee_device:chr_file rw_file_perms; 11allow hal_fingerprint_default uhid_device:chr_file rw_file_perms; 12 13# TODO(b/36644492): Remove data_between_core_and_vendor_violators once 14# hal_fingerprint no longer directly accesses fingerprintd_data_file. 15typeattribute hal_fingerprint_default data_between_core_and_vendor_violators; 16# access to /data/system/users/[0-9]+/fpdata 17allow hal_fingerprint_default fingerprintd_data_file:file create_file_perms; 18allow hal_fingerprint_default fingerprintd_data_file:dir rw_dir_perms; 19