allow hal_fingerprint_default { fp_sensor_device tee_device }:chr_file rw_file_perms; allow hal_fingerprint_default fingerprint_vendor_data_file:dir { rw_dir_perms create rmdir }; allow hal_fingerprint_default fingerprint_vendor_data_file:file { read write open getattr rename create unlink }; # /efs/biometrics allow hal_fingerprint_default biometrics_efs_file:file r_file_perms; allow hal_fingerprint_default biometrics_efs_file:dir search; allow hal_fingerprint_default efs_file:dir search; # /sys/class/fingerprint/ allow hal_fingerprint_default sysfs_fingerprint:dir r_dir_perms; allow hal_fingerprint_default sysfs_fingerprint:file r_file_perms; # /data/vendor/biometrics/* allow hal_fingerprint_default biometrics_vendor_data_file:file create_file_perms; allow hal_fingerprint_default biometrics_vendor_data_file:dir { read write open add_name create rmdir remove_name search }; # /sys/class/lcd/panel/ allow hal_fingerprint_default sysfs_lcd_writable:file r_file_perms;