device_samsung_sm7125-common/sepolicy/vendor/hal_fingerprint_default.te

allow hal_fingerprint_default {
    fp_sensor_device
    tee_device
}:chr_file rw_file_perms;

allow hal_fingerprint_default fingerprint_vendor_data_file:dir { rw_dir_perms create rmdir };

allow hal_fingerprint_default fingerprint_vendor_data_file:file { read write open getattr rename create unlink };

# /efs/biometrics
allow hal_fingerprint_default biometrics_efs_file:file r_file_perms;
allow hal_fingerprint_default biometrics_efs_file:dir search;
allow hal_fingerprint_default efs_file:dir search;

# /sys/class/lcd/panel/mask_brightness
allow hal_fingerprint_default sysfs_lcd_writable:dir search;
allow hal_fingerprint_default sysfs_lcd_writable:file rw_file_perms;

# /sys/class/fingerprint/
allow hal_fingerprint_default sysfs_fingerprint:dir r_dir_perms;
allow hal_fingerprint_default sysfs_fingerprint:file r_file_perms;

# /data/vendor/biometrics/*
allow hal_fingerprint_default biometrics_vendor_data_file:file create_file_perms;
allow hal_fingerprint_default biometrics_vendor_data_file:dir { read write open add_name create rmdir remove_name search };

# /sys/class/sec/tsp/
allow hal_fingerprint_default sysfs_sec_touchscreen:dir search;
allow hal_fingerprint_default sysfs_touchscreen_writable:file { write open getattr };