| get_prop(vold, vendor_tee_listener_prop) | |
| allow vold sysfs_scsi_devices_0000:file w_file_perms; | |
| allow vold sysfs_scsi_devices_other:file w_file_perms; | |
| allow vold sysfs_devices_block:file write; | |
| # allow vold to trim /mnt/vendor/persist by sending ioctl FITRIM | |
| allow vold persist_file:dir { ioctl open read }; | |
| # generated by proc scan, unnecessary | |
| dontaudit vold proc_irq:dir read; |