1allow untrusted_app {
2                      mali_device
3                      hi_tde_device
4                      hi_gfx2d_device }:chr_file rw_file_perms;
5
6allow untrusted_app { audio_device
7                      graphics_device
8                      input_device
9                      block_device
10                      apk_private_data_file
11                      asec_image_file
12                      property_data_file
13                      drm_data_file
14                      media_data_file
15                      install_data_file
16                      fscklogs
17                      backup_data_file
18                      usb_device
19                      tombstone_data_file }:dir { getattr read search };
20
21allow untrusted_app hi_userdata_block_device:blk_file { getattr };
22allow untrusted_app fs_bpf:dir { add_name search write };
23allow untrusted_app block_device:{ dir blk_file } { getattr };
24allow untrusted_app mali_device:chr_file { getattr ioctl open read write };
25allow untrusted_app pstorefs:dir { search };
26allow untrusted_app proc_modules:file { read };
27allow untrusted_app sysfs_kernel_notes:file { read };
28allow untrusted_app hi_vfmw_device:chr_file { write read open ioctl };
29