| allow hal_confirmationui_server tee_device:chr_file rw_file_perms; | |
| allow hal_confirmationui_server ion_device:chr_file r_file_perms; | |
| allow hal_confirmationui_server hal_tui_comm_hwservice:hwservice_manager find; | |
| vndbinder_use(hal_confirmationui_server) | |
| binder_call(hal_confirmationui_server, keystore) | |
| allow hal_confirmationui_server input_device:chr_file rw_file_perms; | |
| allow hal_confirmationui_server input_device:dir r_dir_perms; |