allow hal_confirmationui_server tee_device:chr_file rw_file_perms;
allow hal_confirmationui_server ion_device:chr_file r_file_perms;

allow hal_confirmationui_server hal_tui_comm_hwservice:hwservice_manager find;
binder_call(hal_confirmationui_server, hal_tui_comm)

vndbinder_use(hal_confirmationui_server)
allow hal_confirmationui_server citadeld_service:service_manager find;
binder_call(hal_confirmationui_server, citadeld)

binder_call(hal_confirmationui_server, keystore)

allow hal_confirmationui_server input_device:chr_file rw_file_perms;
allow hal_confirmationui_server input_device:dir r_dir_perms;