# sock_file
dontaudit { priv_app system_app platform_app } { fwmarkd_socket dnsproxyd_socket } sock_file write
allow     { priv_app system_app platform_app } { fwmarkd_socket dnsproxyd_socket } sock_file write
dontaudit { priv_app system_app platform_app } property_socket sock_file { open read write }
allow     { priv_app system_app platform_app } property_socket sock_file { open read write }
dontaudit { hal_audio_default hal_bluetooth } property_socket sock_file write
allow     { hal_audio_default hal_bluetooth } property_socket sock_file write
dontaudit bufferhubd pdx_performance_client_endpoint_socket_type sock_file { ioctl read write getattr lock append open }
allow     bufferhubd pdx_performance_client_endpoint_socket_type sock_file { ioctl read write getattr lock append open }
dontaudit audioserver logd_socket sock_file write
allow     audioserver logd_socket sock_file write

# unix_stream_socket
dontaudit { priv_app system_app platform_app } { init netd } unix_stream_socket connectto
allow     { priv_app system_app platform_app } { init netd } unix_stream_socket connectto
dontaudit dtsconfigurator dtsconfigurator unix_stream_socket { accept append bind connect connectto create getattr getopt ioctl listen lock read setattr setopt shutdown write }
allow     dtsconfigurator dtsconfigurator unix_stream_socket { accept append bind connect connectto create getattr getopt ioctl listen lock read setattr setopt shutdown write }
dontaudit dtseagleservice dtseagleservice unix_stream_socket { accept append bind connect connectto create getattr getopt ioctl listen lock read setattr setopt shutdown write }
allow     dtseagleservice dtseagleservice unix_stream_socket { accept append bind connect connectto create getattr getopt ioctl listen lock read setattr setopt shutdown write }
dontaudit init pdx_bufferhub_client_endpoint_socket_type unix_stream_socket { create bind }
allow     init pdx_bufferhub_client_endpoint_socket_type unix_stream_socket { create bind }
dontaudit bufferhubd pdx_bufferhub_client_endpoint_socket_type unix_stream_socket { read write getattr setattr lock append listen accept getopt setopt shutdown }
allow     bufferhubd pdx_bufferhub_client_endpoint_socket_type unix_stream_socket { read write getattr setattr lock append listen accept getopt setopt shutdown }
dontaudit bufferhubd pdx_bufferhub_client_channel_socket_type unix_stream_socket { ioctl read write create getattr setattr lock append bind connect listen accept getopt setopt shutdown }
allow     bufferhubd pdx_bufferhub_client_channel_socket_type unix_stream_socket { ioctl read write create getattr setattr lock append bind connect listen accept getopt setopt shutdown }
dontaudit bufferhubd pdx_performance_client_endpoint_socket_type unix_stream_socket { read write shutdown connectto }
allow     bufferhubd pdx_performance_client_endpoint_socket_type unix_stream_socket { read write shutdown connectto }
dontaudit bufferhubd pdx_performance_client_channel_socket_type unix_stream_socket { read write getattr setattr lock append getopt setopt shutdown }
allow     bufferhubd pdx_performance_client_channel_socket_type unix_stream_socket { read write getattr setattr lock append getopt setopt shutdown }
dontaudit { hal_audio_default hal_bluetooth } init unix_stream_socket connectto
allow     { hal_audio_default hal_bluetooth } init unix_stream_socket connectto
dontaudit audioserver logd unix_stream_socket connectto
allow     audioserver logd unix_stream_socket connectto

# dir
dontaudit { priv_app system_app platform_app } dts_data_file dir { ioctl read write open getattr }
allow     { priv_app system_app platform_app } dts_data_file dir { ioctl read write open getattr }
dontaudit { priv_app system_app platform_app } { asec_apk_file vendor_data_file shell_data_file preloads_media_file } dir { ioctl read getattr lock search open }
allow     { priv_app system_app platform_app } { asec_apk_file vendor_data_file shell_data_file preloads_media_file } dir { ioctl read getattr lock search open }
dontaudit { priv_app system_app platform_app } media_rw_data_file dir { ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open }
allow     { priv_app system_app platform_app } media_rw_data_file dir { ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open }
dontaudit { priv_app system_app platform_app } { sysfs_hwrandom preloads_data_file mnt_media_rw_file migt_file mnt_vendor_file blkio sysfs_zram } dir search
allow     { priv_app system_app platform_app } { sysfs_hwrandom preloads_data_file mnt_media_rw_file migt_file mnt_vendor_file blkio sysfs_zram } dir search
dontaudit { priv_app system_app platform_app } vendor_app_file dir { read getattr search open }
allow     { priv_app system_app platform_app } vendor_app_file dir { read getattr search open }
dontaudit { priv_app system_app platform_app } device dir { read open }
allow     { priv_app system_app platform_app } device dir { read open }
dontaudit { priv_app system_app platform_app } vendor_data_file dir { search read write }
allow     { priv_app system_app platform_app } vendor_data_file dir { search read write }
dontaudit { priv_app system_app platform_app } system_data_file dir open
allow     { priv_app system_app platform_app } system_data_file dir open
dontaudit { priv_app system_app platform_app } system_app_data_file dir getattr
allow     { priv_app system_app platform_app } system_app_data_file dir getattr
dontaudit { priv_app system_app platform_app } apk_data_file dir write
allow     { priv_app system_app platform_app } apk_data_file dir write
dontaudit { priv_app system_app platform_app magisk_client } system_data_file dir read
allow     { priv_app system_app platform_app magisk_client } system_data_file dir read
dontaudit hal_audio_default sysfs_net dir { read open search }
allow     hal_audio_default sysfs_net dir { read open search }
dontaudit hal_audio_default unlabeled dir { search write add_name }
allow     hal_audio_default unlabeled dir { search write add_name }
dontaudit hal_audio_default vendor_data_file dir { read write open getattr ioctl search add_name }
allow     hal_audio_default vendor_data_file dir { read write open getattr ioctl search add_name }
dontaudit { audioserver mediacodec mediaserver } vendor_data_file dir { ioctl read write getattr lock add_name remove_name search open }
allow     { audioserver mediacodec mediaserver } vendor_data_file dir { ioctl read write getattr lock add_name remove_name search open }
dontaudit audioserver vendor_data_file dir { write add_name }
allow     audioserver vendor_data_file dir { write add_name }
dontaudit { audioserver mediaserver } vendor_data_file dir { read execute open search getattr }
allow     { audioserver mediaserver } vendor_data_file dir { read execute open search getattr }
dontaudit { dtsconfigurator dtseagleservice } tmpfs dir { getattr search }
allow     { dtsconfigurator dtseagleservice } tmpfs dir { getattr search }
dontaudit { dtsconfigurator dtseagleservice } audio_device dir { ioctl read getattr lock search open }
allow     { dtsconfigurator dtseagleservice } audio_device dir { ioctl read getattr lock search open }
dontaudit dtsconfigurator { dtsconfigurator sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal vendor_file_type } dir { getattr ioctl lock open read search }
allow     dtsconfigurator { dtsconfigurator sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal vendor_file_type } dir { getattr ioctl lock open read search }
dontaudit dtseagleservice { dtseagleservice sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal vendor_file_type } dir { getattr ioctl lock open read search }
allow     dtseagleservice { dtseagleservice sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal vendor_file_type } dir { getattr ioctl lock open read search }
dontaudit bufferhubd pdx_performance_client_endpoint_dir_type dir { ioctl read getattr lock search open }
allow     bufferhubd pdx_performance_client_endpoint_dir_type dir { ioctl read getattr lock search open }
dontaudit hal_audio { proc audio_device } dir { ioctl read getattr lock search open }
allow     hal_audio { proc audio_device } dir { ioctl read getattr lock search open }
dontaudit hal_bluetooth { bluetooth_efs_file sysfs_type } dir { ioctl read getattr lock search open }
allow     hal_bluetooth { bluetooth_efs_file sysfs_type } dir { ioctl read getattr lock search open }
dontaudit system_server qti_debugfs dir search
allow     system_server qti_debugfs dir search
dontaudit hal_perf_default kernel dir search
allow     hal_perf_default kernel dir search
dontaudit hal_iop_default { priv_app system_app platform_app } dir *
allow     hal_iop_default { priv_app system_app platform_app } dir *
dontaudit hvdcp sysfs_batteryinfo dir search
allow     hvdcp sysfs_batteryinfo dir search
dontaudit system_suspend sysfs_rtc dir { read open }
allow     system_suspend sysfs_rtc dir { read open }
dontaudit vendor_hal_perf_default system_server dir search
allow     vendor_hal_perf_default system_server dir search
dontaudit installd blkio dir search
allow     installd blkio dir search
dontaudit iorap_prefetcherd { backup_data_file system_app_data_file resourcecache_data_file } dir search
allow     iorap_prefetcherd { backup_data_file system_app_data_file resourcecache_data_file } dir search
dontaudit mediaprovider mnt_media_rw_file dir getattr
allow     mediaprovider mnt_media_rw_file dir getattr
dontaudit audioserver sysfs_net dir { read open search }
allow     audioserver sysfs_net dir { read open search }
dontaudit magisk_client rootfs dir read
allow     magisk_client rootfs dir read
dontaudit init system_file dir relabelfrom
allow     init system_file dir relabelfrom

# file
dontaudit { priv_app system_app platform_app } { dts_data_file system_data_file } file { read write open getattr }
allow     { priv_app system_app platform_app } { dts_data_file system_data_file } file { read write open getattr }
dontaudit { priv_app system_app platform_app } { asec_apk_file shell_data_file sysfs_hwrandom preloads_media_file } file { ioctl read getattr lock open }
allow     { priv_app system_app platform_app } { asec_apk_file shell_data_file sysfs_hwrandom preloads_media_file } file { ioctl read getattr lock open }
dontaudit { priv_app system_app platform_app } { sysfs_android_usb theme_prop bg_boot_complete_prop bg_daemon_prop bluetooth_prop bootloader_boot_reason_prop vendor_radio_prop customize_prop } file open
allow     { priv_app system_app platform_app } { sysfs_android_usb theme_prop bg_boot_complete_prop bg_daemon_prop bluetooth_prop bootloader_boot_reason_prop vendor_radio_prop customize_prop } file open
dontaudit { priv_app system_app platform_app } app_data_file file { read write getattr }
allow     { priv_app system_app platform_app } app_data_file file { read write getattr }
dontaudit { priv_app system_app platform_app } media_rw_data_file file { ioctl read write create getattr setattr lock append unlink rename open }
allow     { priv_app system_app platform_app } media_rw_data_file file { ioctl read write create getattr setattr lock append unlink rename open }
dontaudit { priv_app system_app platform_app } vendor_app_file file { read getattr execute open }
allow     { priv_app system_app platform_app } vendor_app_file file { read getattr execute open }
dontaudit { priv_app system_app platform_app } vendor_data_file file { lock create }
allow     { priv_app system_app platform_app } vendor_data_file file { lock create }
dontaudit { priv_app system_app platform_app } { unlabeled proc_modules proc_interrupts } file *
allow     { priv_app system_app platform_app } { unlabeled proc_modules proc_interrupts } file *
dontaudit { priv_app system_app platform_app } { vendor_file bg_boot_complete_prop bg_daemon_prop bluetooth_prop bootloader_boot_reason_prop vendor_radio_prop vendor_display_prop adbd_prop apexd_prop customize_prop } file getattr
allow     { priv_app system_app platform_app } { vendor_file bg_boot_complete_prop bg_daemon_prop bluetooth_prop bootloader_boot_reason_prop vendor_radio_prop vendor_display_prop adbd_prop apexd_prop customize_prop } file getattr
dontaudit { priv_app system_app platform_app } { bg_boot_complete_prop bg_daemon_prop bluetooth_prop } file { read write }
allow     { priv_app system_app platform_app } { bg_boot_complete_prop bg_daemon_prop bluetooth_prop } file { read write }
dontaudit { priv_app system_app platform_app } { bootloader_boot_reason_prop proc_pagetypeinfo vendor_radio_prop vendor_display_prop customize_prop } file read
allow     { priv_app system_app platform_app } { bootloader_boot_reason_prop proc_pagetypeinfo vendor_radio_prop vendor_display_prop customize_prop } file read
dontaudit { priv_app system_app platform_app } vendor_displayfeature_prop file { read open getattr }
allow     { priv_app system_app platform_app } vendor_displayfeature_prop file { read open getattr }
dontaudit { priv_app system_app platform_app } system_file file lock
allow     { priv_app system_app platform_app } system_file file lock
dontaudit { priv_app system_app platform_app } { vendor_display_prop adbd_prop apexd_prop adsprpc_prop } file open
allow     { priv_app system_app platform_app } { vendor_display_prop adbd_prop apexd_prop adsprpc_prop } file open
dontaudit { priv_app system_app platform_app } { bluetooth_prop vendor_radio_prop bootloader_boot_reason_prop vendor_display_prop adbd_prop apexd_prop } file map
allow     { priv_app system_app platform_app } { bluetooth_prop vendor_radio_prop bootloader_boot_reason_prop vendor_display_prop adbd_prop apexd_prop } file map
dontaudit { priv_app system_app platform_app hal_audio_default } { vendor_data_file vendor_configs_file } file { ioctl read write open getattr }
allow     { priv_app system_app platform_app hal_audio_default } { vendor_data_file vendor_configs_file } file { ioctl read write open getattr }
dontaudit hal_audio_default app_data_file file { ioctl read write open getattr }
allow     hal_audio_default app_data_file file { ioctl read write open getattr }
dontaudit hal_audio_default unlabeled file { read write create open getattr }
allow     hal_audio_default unlabeled file { read write create open getattr }
dontaudit hal_audio_default vendor_data_file file { create unlink setattr }
allow     hal_audio_default vendor_data_file file { create unlink setattr }
dontaudit hal_audio_default vendor_configs_file file lock
allow     hal_audio_default vendor_configs_file file lock
dontaudit hal_audio_default vendor_file file { open read write ioctl lock }
allow     hal_audio_default vendor_file file { open read write ioctl lock }
dontaudit hal_audio_default { sysfs sysfs_net } file { read open getattr }
allow     hal_audio_default { sysfs sysfs_net } file { read open getattr }
dontaudit hal_audio_default { default_prop adb_data_file system_prop } file read
allow     hal_audio_default { default_prop adb_data_file system_prop } file read
dontaudit hal_audio_default default_prop file { open getattr }
allow     hal_audio_default default_prop file { open getattr }
dontaudit hal_audio_default mnt_vendor_file file { read open }
allow     hal_audio_default mnt_vendor_file file { read open }
dontaudit init { vendor_file system_file vendor_configs_file } file relabelfrom
allow     init { vendor_file system_file vendor_configs_file } file relabelfrom
dontaudit init { dtsconfigurator_exec dtseagleservice_exec } file { read getattr execute open }
allow     init { dtsconfigurator_exec dtseagleservice_exec } file { read getattr execute open }
dontaudit audioserver { serialno_prop oem_prop } file { read getattr open }
allow     audioserver { serialno_prop oem_prop } file { read getattr open }
dontaudit audioserver vendor_configs_file file ioctl
allow     audioserver vendor_configs_file file ioctl
dontaudit audioserver { sysfs_net system_data_file } file { read open getattr }
allow     audioserver { sysfs_net system_data_file } file { read open getattr }
dontaudit audioserver system_data_file file write
allow     audioserver system_data_file file write
dontaudit { audioserver mediaserver } vendor_file file read
allow     { audioserver mediaserver } vendor_file file read
dontaudit { audioserver mediaserver mediacodec } vendor_data_file file { ioctl read write create getattr setattr lock append unlink rename open }
allow     { audioserver mediaserver mediacodec } vendor_data_file file { ioctl read write create getattr setattr lock append unlink rename open }
dontaudit dtsconfigurator dtsconfigurator_tmpfs file { read write getattr map }
allow     dtsconfigurator dtsconfigurator_tmpfs file { read write getattr map }
dontaudit dtsconfigurator dtsconfigurator_exec file { read getattr execute entrypoint open map }
allow     dtsconfigurator dtsconfigurator_exec file { read getattr execute entrypoint open map }
dontaudit dtsconfigurator dtsconfigurator file { append getattr ioctl lock map open read write }
allow     dtsconfigurator dtsconfigurator file { append getattr ioctl lock map open read write }
dontaudit dtsconfigurator { netutils_wrapper_exec vendor_file_type } file { execute getattr map open read }
allow     dtsconfigurator { netutils_wrapper_exec vendor_file_type } file { execute getattr map open read }
dontaudit dtsconfigurator { sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal } file { getattr ioctl lock map open read }
allow     dtsconfigurator { sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal } file { getattr ioctl lock map open read }
dontaudit dtseagleservice dtseagleservice_exec file { read getattr execute entrypoint open map }
allow     dtseagleservice dtseagleservice_exec file { read getattr execute entrypoint open map }
dontaudit dtseagleservice dtseagleservice_tmpfs file { read write getattr map }
allow     dtseagleservice dtseagleservice_tmpfs file { read write getattr map }
dontaudit dtseagleservice dtseagleservice file { append getattr ioctl lock map open read write }
allow     dtseagleservice dtseagleservice file { append getattr ioctl lock map open read write }
dontaudit dtseagleservice { netutils_wrapper_exec vendor_file_type } file { execute getattr map open read }
allow     dtseagleservice { netutils_wrapper_exec vendor_file_type } file { execute getattr map open read }
dontaudit dtseagleservice { sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal } file { getattr ioctl lock map open read }
allow     dtseagleservice { sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal } file { getattr ioctl lock map open read }
dontaudit mediaextractor oem_prop file { read open getattr }
allow     mediaextractor oem_prop file { read open getattr }
dontaudit hal_perf_default sysfs file write
allow     hal_perf_default sysfs file write
dontaudit hal_audio proc file { ioctl read getattr lock open }
allow     hal_audio proc file { ioctl read getattr lock open }
dontaudit hal_bluetooth { sysfs_wake_lock sysfs_bluetooth_writable proc_bluetooth_writable } file { ioctl read write getattr lock append open }
allow     hal_bluetooth { sysfs_wake_lock sysfs_bluetooth_writable proc_bluetooth_writable } file { ioctl read write getattr lock append open }
dontaudit hal_bluetooth { bluetooth_efs_file sysfs_type bluetooth_prop } file { ioctl read getattr lock open }
allow     hal_bluetooth { bluetooth_efs_file sysfs_type bluetooth_prop } file { ioctl read getattr lock open }
dontaudit system_server audioserver file write
allow     system_server audioserver file write
dontaudit hal_drm_default oem_prop file getattr
allow     hal_drm_default oem_prop file getattr
dontaudit mediacodec oem_prop file *
allow     mediacodec oem_prop file *
dontaudit { dex2oat netutils_wrapper idmap sdcardd toolbox bootstat sgdisk auditctl adbd vold_prepare_subdirs migrate_legacy_obb_data gsid installd } vendor_file file { read getattr }
allow     { dex2oat netutils_wrapper idmap sdcardd toolbox bootstat sgdisk auditctl adbd vold_prepare_subdirs migrate_legacy_obb_data gsid installd } vendor_file file { read getattr }
dontaudit { healthd hal_health_default } sysfs file { read open getattr }
allow     { healthd hal_health_default } sysfs file { read open getattr }
dontaudit qti_init_shell sysfs_io_sched_tuneable file write
allow     qti_init_shell sysfs_io_sched_tuneable file write
dontaudit vendor_hal_gnss_qti vendor_pd_locater_dbg_prop file read
allow     vendor_hal_gnss_qti vendor_pd_locater_dbg_prop file read
dontaudit system_suspend sysfs_rtc file { read open getattr }
allow     system_suspend sysfs_rtc file { read open getattr }
dontaudit system_suspend sysfs file { read open }
allow     system_suspend sysfs file { read open }
dontaudit netmgrd system_file file { read open execute execute_no_trans }
allow     netmgrd system_file file { read open execute execute_no_trans }
dontaudit radio cgroup file write
allow     radio cgroup file write
dontaudit vendor_hal_perf_default system_server file { read open getattr }
allow     vendor_hal_perf_default system_server file { read open getattr }
dontaudit system_server vendor_debugfs_ion file { read open getattr }
allow     system_server vendor_debugfs_ion file { read open getattr }
dontaudit { zygote gsid } device file { write open }
allow     { zygote gsid } device file { write open }
dontaudit init { proc sysfs_devices_system_cpu } file write
allow     init { proc sysfs_devices_system_cpu } file write
dontaudit magisk magisk file ioctl
allow     magisk magisk file ioctl
dontaudit flags_health_check { boottime_public_prop bservice_prop cnd_vendor_prop bootloader_boot_reason_prop ctl_bootanim_prop ctl_bugreport_prop ctl_default_prop cnd_vendor_prop cold_boot_done_prop cpu_variant_prop charger_prop } file open
allow     flags_health_check { boottime_public_prop bservice_prop cnd_vendor_prop bootloader_boot_reason_prop ctl_bootanim_prop ctl_bugreport_prop ctl_default_prop cnd_vendor_prop cold_boot_done_prop cpu_variant_prop charger_prop } file open
dontaudit flags_health_check { bootloader_boot_reason_prop boottime_public_prop ctl_bootanim_prop ctl_bugreport_prop cnd_vendor_prop } file getattr
allow     flags_health_check { bootloader_boot_reason_prop boottime_public_prop ctl_bootanim_prop ctl_bugreport_prop cnd_vendor_prop } file getattr
dontaudit netmgrd system_file file { getattr read open execute }
allow     netmgrd system_file file { getattr read open execute }
dontaudit iorap_prefetcherd { vendor_file backup_data_file system_app_data_file } file { read open }
allow     iorap_prefetcherd { vendor_file backup_data_file system_app_data_file } file { read open }
dontaudit { sdcardd toolbox vold_prepare_subdirs bootstat auditctl mpdecision sgdisk installd migrate_legacy_obb_data gsid tombstoned audioserver magisk_client } { credmgrd_exec suntrold_exec } file getattr
allow     { sdcardd toolbox vold_prepare_subdirs bootstat auditctl mpdecision sgdisk installd migrate_legacy_obb_data gsid tombstoned audioserver magisk_client } { credmgrd_exec suntrold_exec } file getattr
dontaudit dex2oat credmgrd_exec file getattr
allow     dex2oat credmgrd_exec file getattr
dontaudit crash_dump { bluetooth_prop hwservicemanager_prop } file { open getattr }
allow     crash_dump { bluetooth_prop hwservicemanager_prop } file { open getattr }

# lnk_file
dontaudit { priv_app system_app platform_app } vendor_app_file lnk_file { read getattr open }
allow     { priv_app system_app platform_app } vendor_app_file lnk_file { read getattr open }
dontaudit { priv_app system_app platform_app } vendor_data_file lnk_file { ioctl read getattr lock open }
allow     { priv_app system_app platform_app } vendor_data_file lnk_file { ioctl read getattr lock open }
dontaudit dtsconfigurator { dtsconfigurator mnt_vendor_file sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal } lnk_file { getattr ioctl lock map open read }
allow     dtsconfigurator { dtsconfigurator mnt_vendor_file sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal } lnk_file { getattr ioctl lock map open read }
dontaudit dtsconfigurator vendor_file_type lnk_file { getattr read }
allow     dtsconfigurator vendor_file_type lnk_file { getattr read }
dontaudit dtseagleservice { dtseagleservice mnt_vendor_file sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal } lnk_file { getattr ioctl lock map open read }
allow     dtseagleservice { dtseagleservice mnt_vendor_file sysfs_esoc sysfs_socinfo sysfs_ssr sysfs_thermal } lnk_file { getattr ioctl lock map open read }
dontaudit dtseagleservice vendor_file_type lnk_file { getattr read }
allow     dtseagleservice vendor_file_type lnk_file { getattr read }
dontaudit hal_bluetooth { sysfs_type bluetooth_efs_file } lnk_file { ioctl read getattr lock open }
allow     hal_bluetooth { sysfs_type bluetooth_efs_file } lnk_file { ioctl read getattr lock open }
dontaudit hal_audio proc lnk_file { ioctl read getattr lock open }
allow     hal_audio proc lnk_file { ioctl read getattr lock open }
dontaudit hal_iop_default { priv_app system_app platform_app } lnk_file *
allow     hal_iop_default { priv_app system_app platform_app } lnk_file *

# service_manager
allow { priv_app system_app platform_app } servicemanager service_manager list
allow { priv_app system_app platform_app } { default_android_service audioserver_service drmserver_service mediaserver_service mediaextractor_service mediacodec_service mediametrics_service mediadrmserver_service nfc_service radio_service surfaceflinger_service app_api_service vr_manager_service mqs_service opdiagnose_service } service_manager find
allow dtseagleservice dtseagleservice_service service_manager add
allow mediaprovider radio_service service_manager find

# hwservice_manager
allow { priv_app system_app platform_app } default_android_hwservice hwservice_manager find
allow hal_audio_server hal_audio_hwservice hwservice_manager { add find }
allow hal_audio_server hidl_base_hwservice hwservice_manager add
allow hal_audio_client hal_audio_hwservice hwservice_manager find
allow hal_allocator_client { hidl_allocator_hwservice hidl_memory_hwservice } hwservice_manager find
allow hal_bluetooth_client hal_bluetooth_hwservice hwservice_manager find
allow hal_allocator_server hidl_allocator_hwservice hwservice_manager { add find }
allow hal_bluetooth_server hal_bluetooth_hwservice hwservice_manager { add find }
allow { hal_allocator_server hal_bluetooth_server } hidl_base_hwservice hwservice_manager add
allow { shell theme } vendor_hal_perf_hwservice hwservice_manager find
allow bluetooth hal_lge_property_hwservice hwservice_manager find

# process
dontaudit { priv_app system_app platform_app } { priv_app system_app platform_app } process ptrace
allow     { priv_app system_app platform_app } { priv_app system_app platform_app } process ptrace
dontaudit init { dtsconfigurator dtseagleservice } process { transition siginh rlimitinh }
allow     init { dtsconfigurator dtseagleservice } process { transition siginh rlimitinh }
dontaudit dtsconfigurator dtsconfigurator process { fork getattr getcap getpgid getsched getsession setcap setpgid setrlimit setsched sigchld sigkill signal signull sigstop }
allow     dtsconfigurator dtsconfigurator process { fork getattr getcap getpgid getsched getsession setcap setpgid setrlimit setsched sigchld sigkill signal signull sigstop }
dontaudit { dtsconfigurator dtseagleservice } netutils_wrapper process { rlimitinh siginh transition }
allow     { dtsconfigurator dtseagleservice } netutils_wrapper process { rlimitinh siginh transition }
dontaudit dtseagleservice dtseagleservice process { fork getattr getcap getpgid getsched getsession setcap setpgid setrlimit setsched sigchld sigkill signal signull sigstop }
allow     dtseagleservice dtseagleservice process { fork getattr getcap getpgid getsched getsession setcap setpgid setrlimit setsched sigchld sigkill signal signull sigstop }
dontaudit bufferhubd self process setsockcreate
allow     bufferhubd self process setsockcreate
dontaudit system_server app_zygote process getpgid
allow     system_server app_zygote process getpgid

# fd
dontaudit { priv_app system_app platform_app dtseagleservice } dtseagleservice fd use
allow     { priv_app system_app platform_app dtseagleservice } dtseagleservice fd use
dontaudit dtsconfigurator dtsconfigurator fd use
allow     dtsconfigurator dtsconfigurator fd use
dontaudit dtseagleservice { priv_app system_app platform_app } fd use
allow     dtseagleservice { priv_app system_app platform_app } fd use
dontaudit hal_allocator_client hal_allocator_server fd use
allow     hal_allocator_client hal_allocator_server fd use
dontaudit netd { priv_app system_app platform_app } fd use
allow     netd { priv_app system_app platform_app } fd use
dontaudit bufferhubd { mediacodec pdx_performance_client_server_type } fd use
allow     bufferhubd { mediacodec pdx_performance_client_server_type } fd use
dontaudit pdx_performance_client_server_type bufferhubd fd use
allow     pdx_performance_client_server_type bufferhubd fd use
dontaudit hal_audio { shell dumpstate } fd use
allow     hal_audio { shell dumpstate } fd use
dontaudit hal_audio_client hal_audio_server fd use
allow     hal_audio_client hal_audio_server fd use
dontaudit hal_audio_server hal_audio_client fd use
allow     hal_audio_server hal_audio_client fd use
dontaudit hal_bluetooth_client hal_bluetooth_server fd use
allow     hal_bluetooth_client hal_bluetooth_server fd use
dontaudit hal_bluetooth_server hal_bluetooth_client fd use
allow     hal_bluetooth_server hal_bluetooth_client fd use

# binder
dontaudit { priv_app system_app platform_app } dtseagleservice binder { call transfer }
allow     { priv_app system_app platform_app } dtseagleservice binder { call transfer }
dontaudit { priv_app system_app platform_app } hal_memtrack_default binder call
allow     { priv_app system_app platform_app } hal_memtrack_default binder call
dontaudit { priv_app system_app platform_app audioserver } su binder call
allow     { priv_app system_app platform_app audioserver } su binder call
dontaudit dtseagleservice { priv_app system_app platform_app } binder { call transfer }
allow     dtseagleservice { priv_app system_app platform_app } binder { call transfer }
dontaudit hal_audio_client hal_audio_server binder { call transfer }
allow     hal_audio_client hal_audio_server binder { call transfer }
dontaudit hal_audio_server hal_audio_client binder { call transfer }
allow     hal_audio_server hal_audio_client binder { call transfer }
dontaudit hal_allocator_client hal_allocator_server binder { call transfer}
allow     hal_allocator_client hal_allocator_server binder { call transfer}
dontaudit hal_allocator_server hal_allocator_client binder transfer
allow     hal_allocator_server hal_allocator_client binder transfer
dontaudit hal_bluetooth_client hal_bluetooth_server binder { call transfer }
allow     hal_bluetooth_client hal_bluetooth_server binder { call transfer }
dontaudit hal_bluetooth_server hal_bluetooth_client binder { call transfer }
allow     hal_bluetooth_server hal_bluetooth_client binder { call transfer }
dontaudit system_server init binder call
allow     system_server init binder call

# udp_socket
dontaudit { priv_app system_app platform_app } { priv_app system_app platform_app } udp_socket { create connect }
allow     { priv_app system_app platform_app } { priv_app system_app platform_app } udp_socket { create connect }

# tcp_socket
dontaudit { priv_app system_app platform_app } { priv_app system_app platform_app } tcp_socket { read write create getattr connect getopt setopt }
allow     { priv_app system_app platform_app } { priv_app system_app platform_app } tcp_socket { read write create getattr connect getopt setopt }
dontaudit { priv_app system_app platform_app } port tcp_socket name_connect
allow     { priv_app system_app platform_app } port tcp_socket name_connect
dontaudit netd { priv_app system_app platform_app } tcp_socket { read write getopt setopt }
allow     netd { priv_app system_app platform_app } tcp_socket { read write getopt setopt }

# fifo_file
dontaudit hal_audio { shell dumpstate } fifo_file write
allow     hal_audio { shell dumpstate } fifo_file write
dontaudit dtsconfigurator dtsconfigurator fifo_file { append getattr ioctl lock map open read write }
allow     dtsconfigurator dtsconfigurator fifo_file { append getattr ioctl lock map open read write }
dontaudit dtseagleservice dtseagleservice fifo_file { append getattr ioctl lock map open read write }
allow     dtseagleservice dtseagleservice fifo_file { append getattr ioctl lock map open read write }
dontaudit magisk_client magisk_file fifo_file ioctl
allow     magisk_client magisk_file fifo_file ioctl

# chr_file
dontaudit { priv_app system_app platform_app } device chr_file { ioctl read write }
allow     { priv_app system_app platform_app } device chr_file { ioctl read write }
dontaudit { dtsconfigurator dtseagleservice } { audio_device hwbinder_device } chr_file { ioctl read write getattr lock append open map }
allow     { dtsconfigurator dtseagleservice } { audio_device hwbinder_device } chr_file { ioctl read write getattr lock append open map }
dontaudit { hal_audio bufferhubd } ion_device chr_file { ioctl read getattr lock open }
allow     { hal_audio bufferhubd } ion_device chr_file { ioctl read getattr lock open }
dontaudit hal_audio audio_device chr_file { ioctl read write getattr lock append open }
allow     hal_audio audio_device chr_file { ioctl read write getattr lock append open }
dontaudit hal_audio_default diag_device chr_file { read write open }
allow     hal_audio_default diag_device chr_file { read write open }
dontaudit hal_audio_default device chr_file ioctl
allow     hal_audio_default device chr_file ioctl
dontaudit init oem_device chr_file { read open }
allow     init oem_device chr_file { read open }
dontaudit bufferhubd gpu_device chr_file { ioctl read write getattr lock append open }
allow     bufferhubd gpu_device chr_file { ioctl read write getattr lock append open }
dontaudit audioserver device chr_file *
allow     audioserver device chr_file *
dontaudit hal_bluetooth { uhid_device hci_attach_dev } chr_file { ioctl read write getattr lock append open }
allow     hal_bluetooth { uhid_device hci_attach_dev } chr_file { ioctl read write getattr lock append open }

# unix_dgram_socket
dontaudit dtsconfigurator dtsconfigurator unix_dgram_socket { append bind connect create getattr getopt ioctl lock read sendto setattr setopt shutdown write }
allow     dtsconfigurator dtsconfigurator unix_dgram_socket { append bind connect create getattr getopt ioctl lock read sendto setattr setopt shutdown write }
dontaudit dtseagleservice dtseagleservice unix_dgram_socket { append bind connect create getattr getopt ioctl lock read sendto setattr setopt shutdown write }
allow     dtseagleservice dtseagleservice unix_dgram_socket { append bind connect create getattr getopt ioctl lock read sendto setattr setopt shutdown write }

# property_service
allow { priv_app system_app platform_app } { system_prop ffs_prop } property_service set
allow { hal_audio_default qti_init_shell } default_prop property_service set
allow hal_bluetooth bluetooth_prop property_service set

# capability
dontaudit hal_bluetooth self capability { net_admin sys_nice }
allow     hal_bluetooth self capability { net_admin sys_nice }
dontaudit mqsasd mqsasd capability { sys_ptrace dac_read_search }
allow     mqsasd mqsasd capability { sys_ptrace dac_read_search }
dontaudit zygote zygote capability kill
allow     zygote zygote capability kill
dontaudit hal_power_default hal_power_default capability dac_override
allow     hal_power_default hal_power_default capability dac_override
dontaudit kernel kernel capability { kill dac_override }
allow     kernel kernel capability { kill dac_override }
dontaudit netmgrd netmgrd capability sys_resource
allow     netmgrd netmgrd capability sys_resource
dontaudit netutils_wrapper netutils_wrapper capability sys_admin
allow     netutils_wrapper netutils_wrapper capability sys_admin

# capability2
dontaudit hal_bluetooth self capability2 { block_suspend wake_alarm }
allow     hal_bluetooth self capability2 { block_suspend wake_alarm }
dontaudit init init capability2 block_suspend
allow     init init capability2 block_suspend

# socket
dontaudit init init socket { read write }
allow     init init socket { read write }

# filesystem
dontaudit { priv_app system_app platform_app } firmware_file filesystem getattr
allow     { priv_app system_app platform_app } firmware_file filesystem getattr
dontaudit proc_net proc filesystem associate
allow     proc_net proc filesystem associate

# not sure
allow { priv_app system_app platform_app gmscore_app } hal_memtrack_hwservice hwservice_manager find
allow { priv_app system_app platform_app } hal_imsrcsd_hwservice hwservice_manager find
allow permissioncontroller_app vendor_hal_qspmhal_hwservice hwservice_manager find
allow poweroffalarm_app hal_perf_hwservice hwservice_manager find
allow { priv_app system_app platform_app } cameraserver_service service_manager find
allow { priv_app system_app platform_app } uce_service service_manager add
allow mm-qcamerad default_prop property_service set
dontaudit permissioncontroller_app adbd_prop file { open getattr map }
allow     permissioncontroller_app adbd_prop file { open getattr map }
dontaudit permissioncontroller_app apexd_prop file { open getattr }
allow     permissioncontroller_app apexd_prop file { open getattr }
dontaudit mediaprovider { vendor_displayfeature_prop file_contexts_file } file read
allow     mediaprovider { vendor_displayfeature_prop file_contexts_file } file read
dontaudit mediaprovider file_contexts_file file getattr
allow     mediaprovider file_contexts_file file getattr
dontaudit { gmscore_app vendor_location_app vendor_qtidataservices_app joyose_app } vendor_displayfeature_prop file read
allow     { gmscore_app vendor_location_app vendor_qtidataservices_app joyose_app } vendor_displayfeature_prop file read
dontaudit poweroffalarm_app cgroup file write
allow     poweroffalarm_app cgroup file write
dontaudit poweroffalarm_app theme_data_file file getattr
allow     poweroffalarm_app theme_data_file file getattr
dontaudit system_suspend vendor_sysfs_battery_supply file { read getattr open }
allow     system_suspend vendor_sysfs_battery_supply file { read getattr open }
dontaudit cameraserver persist_camera_prop file read
allow     cameraserver persist_camera_prop file read
dontaudit { priv_app system_app platform_app } migt_file dir search
allow     { priv_app system_app platform_app } migt_file dir search
dontaudit hal_power_default sysfs file { write open }
allow     hal_power_default sysfs file { write open }
dontaudit hal_neuralnetworks_default default_prop file read
allow     hal_neuralnetworks_default default_prop file read
dontaudit { shell vendor_poweroffalarm_app vendor_qtelephony vendor_ssg_app joyose_app } theme_data_file dir search
allow     { shell vendor_poweroffalarm_app vendor_qtelephony vendor_ssg_app joyose_app } theme_data_file dir search
dontaudit { priv_app system_app platform_app } fs_bpf dir search
allow     { priv_app system_app platform_app } fs_bpf dir search
dontaudit system_suspend vendor_sysfs_battery_supply dir { read open }
allow     system_suspend vendor_sysfs_battery_supply dir { read open }
dontaudit { priv_app system_app platform_app } hal_rcsservice binder { call transfer }
allow     { priv_app system_app platform_app } hal_rcsservice binder { call transfer }
dontaudit shell vendor_hal_perf_default binder call
allow     shell vendor_hal_perf_default binder call
dontaudit cameraserver hal_perf_default binder call
allow     cameraserver hal_perf_default binder call
dontaudit gmscore_app hal_memtrack_default binder call
allow     gmscore_app hal_memtrack_default binder call
dontaudit flipendo hal_power_default binder call
allow     flipendo hal_power_default binder call






