1allow hal_confirmationui_default tee_device:chr_file rw_file_perms; 2 3binder_call(hal_confirmationui_default, keystore) 4 5vndbinder_use(hal_confirmationui_default) 6binder_call(hal_confirmationui_default, citadeld) 7allow hal_confirmationui_default citadeld_service:service_manager find; 8 9allow hal_confirmationui_default input_device:chr_file rw_file_perms; 10allow hal_confirmationui_default input_device:dir r_dir_perms; 11 12allow hal_confirmationui_default dmabuf_system_heap_device:chr_file r_file_perms; 13allow hal_confirmationui_default ion_device:chr_file r_file_perms; 14