/dev/at_.*                     u:object_r:at_device:s0
/dev/avtimer                   u:object_r:avtimer_device:s0
/dev/adsprpc-smd               u:object_r:adsprpcd_device:s0
/dev/diag                      u:object_r:diag_device:s0
/dev/jpeg[0-9]+                u:object_r:camera_device:s0
/dev/kgsl-3d0                  u:object_r:gpu_device:s0
/dev/mdss_rotator              u:object_r:graphics_device:s0
/dev/media([0-9])+             u:object_r:camera_device:s0
/dev/nanohub                   u:object_r:sensors_device:s0
/dev/nanohub_comms             u:object_r:sensors_device:s0
/dev/qseecom                   u:object_r:tee_device:s0
/dev/ramdump_.*                u:object_r:ramdump_device:s0
/dev/sdsprpc-smd               u:object_r:sdsprpc_device:s0
/dev/sg[0-9]+                  u:object_r:sg_device:s0
/dev/subsys_.*                 u:object_r:ssr_device:s0
/dev/msm_thermal_query         u:object_r:thermal_device:s0
/dev/ttyHS0                    u:object_r:hci_attach_dev:s0
/dev/ttyHSL0                   u:object_r:console_device:s0
/dev/v4l-subdev.*              u:object_r:video_device:s0
/dev/socket/cnd                                 u:object_r:cnd_socket:s0
/dev/socket/ims_.*                              u:object_r:ims_socket:s0
/dev/socket/msm_irqbalance                      u:object_r:irqbalance_socket:s0
/dev/socket/netmgr(/.*)?                        u:object_r:netmgrd_socket:s0
/dev/socket/nims                                u:object_r:cnd_socket:s0
/dev/socket/qmux_audio(/.*)?                    u:object_r:qmuxd_socket:s0
/dev/socket/qmux_bluetooth(/.*)?                u:object_r:qmuxd_socket:s0
/dev/socket/qmux_gps(/.*)?                      u:object_r:qmuxd_socket:s0
/dev/socket/qmux_radio(/.*)?                    u:object_r:qmuxd_socket:s0
/dev/socket/qmux_nfc(/.*)?                      u:object_r:qmuxd_socket:s0
/dev/socket/thermal-send-client                 u:object_r:thermal_socket:s0
/dev/socket/thermal-recv-client                 u:object_r:thermal_socket:s0
/dev/socket/thermal-recv-passive-client         u:object_r:thermal_socket:s0
/dev/msm_audio_cal             u:object_r:audio_cal_device:s0
/dev/msm_rtac                  u:object_r:audio_cal_device:s0
/dev/pn551                     u:object_r:nfc_device:s0

# A/B partitions.
/dev/block/platform/soc/624000\.ufshc/by-name/aboot_[ab]        u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/apdp_[ab]         u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/boot_[ab]         u:object_r:boot_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/bootlocker_[ab]   u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/cmnlib32_[ab]     u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/cmnlib64_[ab]     u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/devcfg_[ab]       u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/hosd_[ab]         u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/hyp_[ab]          u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/keymaster_[ab]    u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/keystore_[ab]     u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/modem_[ab]        u:object_r:modem_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/msadp_[ab]        u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/pmic_[ab]         u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/rpm_[ab]          u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/system_[ab]       u:object_r:system_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/tz_[ab]           u:object_r:custom_ab_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/vendor_[ab]       u:object_r:system_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/xbl_[ab]          u:object_r:xbl_block_device:s0

# Block device holding the GPT, where the A/B attributes are stored.
/dev/block/platform/soc/624000\.ufshc/sda                    u:object_r:gpt_block_device:s0

# Block devices for the drive that holds the xbl_a and xbl_b partitions.
/dev/block/platform/soc/624000\.ufshc/sd[bc]                 u:object_r:xbl_block_device:s0

# Other, non-A/B partitions.
/dev/block/platform/soc/624000\.ufshc/by-name/frp           u:object_r:frp_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/userdata      u:object_r:userdata_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/misc          u:object_r:misc_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/metadata      u:object_r:metadata_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/fsc           u:object_r:modem_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/fsg           u:object_r:modem_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/modemst1      u:object_r:modem_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/modemst2      u:object_r:modem_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/ssd           u:object_r:ssd_block_device:s0
/dev/block/platform/soc/624000\.ufshc/by-name/ramdump       u:object_r:ramdump_block_device:s0
/dev/block/zram0                                            u:object_r:swap_block_device:s0

# files in firmware
/firmware(/.*)?         u:object_r:firmware_file:s0

# files in /system
/system/bin/irsc_util              u:object_r:irsc_util_exec:s0
/system/bin/mm-pp-dpps             u:object_r:mm-pp-daemon_exec:s0
/system/bin/pm-service             u:object_r:per_mgr_exec:s0
/system/bin/pm-proxy               u:object_r:per_proxy_exec:s0
/system/bin/rmt_storage            u:object_r:rmt_exec:s0
/system/bin/time_daemon            u:object_r:time_exec:s0
/system/bin/wcnss_filter           u:object_r:wcnss_filter_exec:s0
/system/bin/nanoapp_cmd            u:object_r:nanoapp_cmd_exec:s0
/system/bin/netmgrd                u:object_r:netmgrd_exec:s0
/system/bin/qmuxd                  u:object_r:qmuxd_exec:s0
/system/bin/init\.qcom\.qseecomd\.sh u:object_r:init-qcom-qseecomd-sh_exec:s0
/system/bin/mm-qcamera-daemon      u:object_r:camera_exec:s0
/system/bin/port-bridge            u:object_r:port-bridge_exec:s0
/system/bin/loc_launcher           u:object_r:location_exec:s0
/system/bin/location-mq            u:object_r:location_exec:s0
/system/bin/lowi-server            u:object_r:location_exec:s0
/vendor/bin/qseecomd               u:object_r:tee_exec:s0
/system/bin/cnd                    u:object_r:cnd_exec:s0
/system/bin/imsdatadaemon          u:object_r:ims_exec:s0
/system/bin/imsqmidaemon           u:object_r:ims_exec:s0
/system/bin/ims_rtp_daemon         u:object_r:ims_exec:s0
/system/bin/imscmservice           u:object_r:imscm_exec:s0
/system/bin/adsprpcd               u:object_r:adsprpcd_exec:s0
/system/bin/ATFWD-daemon           u:object_r:atfwd_exec:s0
/system/bin/cnss-daemon            u:object_r:cnss-daemon_exec:s0
/system/bin/cnss_diag              u:object_r:cnss_diag_exec:s0
/system/bin/subsystem_ramdump      u:object_r:subsystem_ramdump_exec:s0
/system/bin/ssr_setup              u:object_r:ssr_setup_exec:s0
/system/bin/ramdump                u:object_r:htc_ramdump_exec:s0

/system/bin/init\.mid\.sh          u:object_r:init_mid_exec:s0
/system/bin/init\.power\.sh        u:object_r:init_power_exec:s0
/system/bin/init\.radio\.sh        u:object_r:init_radio_exec:s0
/system/bin/init\.foreground\.sh   u:object_r:init_foreground_exec:s0

/system/bin/preloads_copy\.sh     u:object_r:preloads_copy_exec:s0

# files in /vendor
/vendor/bin/thermal-engine  u:object_r:thermal-engine_exec:s0
/vendor/bin/perfd           u:object_r:perfd_exec:s0
/vendor/bin/nanohub_slpi    u:object_r:nanohub_slpi_exec:s0
/vendor/bin/msm_irqbalance  u:object_r:irqbalance_exec:s0

# /sys
/sys/devices/virtual/nanohub/nanohub(/.*)?       u:object_r:sysfs_nanoapp_cmd:s0
/sys/devices/virtual/thermal(/.*)?               u:object_r:sysfs_thermal:s0
/sys/devices/bt_qca[0-9]+/extldo                 u:object_r:sysfs_bluetooth_writable:s0
/sys/devices/bt_qca[0-9]+/rfkill/rfkill0/state   u:object_r:sysfs_bluetooth_writable:s0
/sys/module/msm_core(/.*)?                       u:object_r:sysfs_msm_core:s0
/sys/devices/soc/70000\.qcom,msm-core(/.*)?      u:object_r:sysfs_msm_core:s0
/sys/module/msm_thermal(/.*)?                    u:object_r:sysfs_thermal:s0
/sys/module/msm_performance(/.*)?                u:object_r:sysfs_perf:s0
/sys/devices/virtual/net(/.*)?                   u:object_r:sysfs_net:s0
/sys/module/subsystem_restart(/.*)?              u:object_r:sysfs_msm_subsys_restart:s0
/sys/bus/msm_subsys(/.*)?                        u:object_r:sysfs_msm_subsys:s0
/sys/devices/soc/ce0000\.qcom,venus(/.*)?        u:object_r:sysfs_msm_subsys:s0
/sys/devices/soc/b00000\.qcom,kgsl-3d0(/.*)?     u:object_r:sysfs_msm_subsys:s0
/sys/devices/soc/soc:qcom,cpubw(/.*)?            u:object_r:sysfs_msm_subsys:s0
/sys/devices/soc/soc:qcom,kgsl-hyp(/.*)?         u:object_r:sysfs_msm_subsys:s0
/sys/devices/soc/soc:qcom,cnss(/.*)?             u:object_r:sysfs_msm_subsys:s0
/sys/devices/soc/9300000\.qcom,lpass(/.*)?       u:object_r:sysfs_msm_subsys:s0
/sys/devices/soc/1c00000\.qcom,ssc(/.*)?         u:object_r:sysfs_msm_subsys:s0
/sys/devices/soc/2080000\.qcom,mss(/.*)?         u:object_r:sysfs_msm_subsys:s0
/sys/devices/soc/600000\.qcom,pcie(/.*)?         u:object_r:sysfs_pcie:s0
/sys/devices/soc/8c0000\.qcom,msm-cam(/.*)?      u:object_r:sysfs_camera:s0
/sys/devices/soc/aa4000\.qcom,fd(/.*)?           u:object_r:sysfs_video:s0
/sys/devices/soc/soc:fp_fpc1020(/.*)?            u:object_r:sysfs_fingerprint:s0
/sys/devices/soc0(/.*)?                          u:object_r:sysfs_soc:s0
/sys/devices/virtual/htc_laser(/.*)?             u:object_r:sysfs_camera:s0
/sys/devices/virtual/htc_laser/laser/enable_ps_sensor u:object_r:sysfs_enable_ps_sensor:s0
/sys/devices/soc/600000\.qcom,pcie/pci0000:00/0000:00:00\.0/0000:01:00\.0/net/wlan0(/.*)? u:object_r:sysfs_wifi:s0
/sys/devices/soc/0\.qcom,rmtfs_sharedmem(/.*)?             u:object_r:sysfs_rmtfs:s0
/sys/devices/soc/84000000\.qcom,rmtfs_rtel_sharedmem(/.*)? u:object_r:sysfs_rmtfs:s0
/sys/module/lpm_levels/parameters(/.*)?                u:object_r:sysfs_power_management:s0
/sys/devices/soc/qpnp-fg-[0-9a-f]+/power_supply/bms/capacity             u:object_r:sysfs_batteryinfo:s0
/sys/devices/soc/qpnp-smbcharger-[0-9a-f]+/power_supply/battery/capacity u:object_r:sysfs_batteryinfo:s0

# debugfs
/sys/kernel/debug/msm_core(/.*)?                 u:object_r:debugfs_msm_core:s0
/sys/kernel/debug/rmt_storage(/.*)?              u:object_r:debugfs_rmt_storage:s0
/sys/kernel/debug/sps(/.*)?                      u:object_r:debugfs_sps:s0

# /data
/data/diag_logs(/.*)?            u:object_r:diag_logs:s0
/data/nfc(/.*)?                  u:object_r:nfc_data_file:s0
/data/time(/.*)?                 u:object_r:time_data_file:s0
/data/ramdump(/.*)?              u:object_r:ramdump_data_file:s0
/data/misc/location(/.*)?        u:object_r:location_data_file:s0
/data/misc/display(/.*)?         u:object_r:display_data_file:s0

/data/misc/perfd(/.*)?           u:object_r:perfd_data_file:s0
/data/system/perfd(/.*)?         u:object_r:perfd_data_file:s0
/data/misc/radio(/.*)?           u:object_r:radio_data_file:s0

# /

/bt_firmware(/.*)?      u:object_r:bt_firmware_file:s0
/tombstones             u:object_r:rootfs:s0
/dsp                    u:object_r:rootfs:s0

# make /dev/snd/seq and /dev/snd/timer inaccessible by labeling with
# default "device" label
/dev/snd/seq            u:object_r:device:s0
/dev/snd/timer          u:object_r:device:s0

# /persist
/persist(/.*)?          u:object_r:persist_file:s0
/persist/data(/.*)?     u:object_r:persist_data_file:s0
/persist/display(/.*)?  u:object_r:persist_display_file:s0