allow hal_fingerprint_default { etsd_device tee_device }: chr_file rw_file_perms; allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl; r_dir_file(hal_fingerprint_default, firmware_file) set_prop(hal_fingerprint_default, vendor_mot_fingerprint_prop) allow hal_fingerprint_default vendor_sysfs_fingerprint:dir r_dir_perms; allow hal_fingerprint_default vendor_sysfs_fingerprint:file rw_file_perms; allow hal_fingerprint_default uhid_device:chr_file rw_file_perms;