(allow init gs_watchdogd_exec (file (read getattr map execute open)))
(allow init gs_watchdogd (process (transition)))
(allow gs_watchdogd gs_watchdogd_exec (file (read getattr map execute open entrypoint)))
(dontaudit init gs_watchdogd (process (noatsecure)))
(allow init gs_watchdogd (process (siginh rlimitinh)))
(typetransition init gs_watchdogd_exec process gs_watchdogd)
(allow gs_watchdogd watchdog_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow gs_watchdogd kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow gs_watchdogd sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
(typetransition factory_ota_app tmpfs file appdomain_tmpfs)
(allow factory_ota_app factory_ota_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su factory_ota_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow factory_ota_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx factory_ota_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow factory_ota_app ota_package_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow factory_ota_app ota_package_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow factory_ota_app property_socket (sock_file (write)))
(allow factory_ota_app init (unix_stream_socket (connectto)))
(allow factory_ota_app sota_prop (property_service (set)))
(allow factory_ota_app sota_prop (file (read getattr map open)))
(allow factory_ota_app system_boot_reason_prop (file (read getattr map open)))
(allow factory_ota_app app_api_service (service_manager (find)))
(allow factory_ota_app update_engine (binder (call transfer)))
(allow update_engine factory_ota_app (binder (transfer)))
(allow factory_ota_app update_engine (fd (use)))
(allow update_engine factory_ota_app (binder (call transfer)))
(allow factory_ota_app update_engine (binder (transfer)))
(allow update_engine factory_ota_app (fd (use)))
(allow factory_ota_app update_engine_service (service_manager (find)))
(allow factory_ota_app nfc_service (service_manager (find)))
(allow factory_ota_app radio_service (service_manager (find)))
(dontaudit factory_ota_app gpuservice (binder (call)))
(allow vendor_init sota_prop (property_service (set)))
(allow vendor_init sota_prop (file (read getattr map open)))
(allow init hal_audio_parameter_parser_exec (file (read getattr map execute open)))
(allow init hal_audio_parameter_parser (process (transition)))
(allow hal_audio_parameter_parser hal_audio_parameter_parser_exec (file (read getattr map execute open entrypoint)))
(dontaudit init hal_audio_parameter_parser (process (noatsecure)))
(allow init hal_audio_parameter_parser (process (siginh rlimitinh)))
(typetransition init hal_audio_parameter_parser_exec process hal_audio_parameter_parser)
(allow hal_audio_parameter_parser hal_audio_parameter_parser_service (service_manager (add find)))
(allow audioserver hal_audio_parameter_parser (binder (call transfer)))
(allow hal_audio_parameter_parser audioserver (binder (transfer)))
(allow audioserver hal_audio_parameter_parser (fd (use)))
(allow hal_audio_parameter_parser servicemanager (binder (call transfer)))
(allow servicemanager hal_audio_parameter_parser (binder (transfer)))
(allow hal_audio_parameter_parser servicemanager (fd (use)))
(allow audioserver hal_audio_parameter_parser_service (service_manager (find)))
(allow init edgetpu_app_server_exec (file (read getattr map execute open)))
(allow init edgetpu_app_server (process (transition)))
(allow edgetpu_app_server edgetpu_app_server_exec (file (read getattr map execute open entrypoint)))
(dontaudit init edgetpu_app_server (process (noatsecure)))
(allow init edgetpu_app_server (process (siginh rlimitinh)))
(typetransition init edgetpu_app_server_exec process edgetpu_app_server)
(allow edgetpu_app_server servicemanager (binder (call transfer)))
(allow servicemanager edgetpu_app_server (binder (call transfer)))
(allow edgetpu_app_server edgetpu_app_service (service_manager (add find)))
(allow edgetpu_app_server package_native_service (service_manager (find)))
(allow edgetpu_app_server system_server (binder (call transfer)))
(allow system_server edgetpu_app_server (binder (transfer)))
(allow edgetpu_app_server system_server (fd (use)))
(allow edgetpu_app_server traced (fd (use)))
(allow edgetpu_app_server traced_tmpfs (file (read write getattr map)))
(allow edgetpu_app_server traced_producer_socket (sock_file (write)))
(allow edgetpu_app_server traced (unix_stream_socket (connectto)))
(allow traced edgetpu_app_server (fd (use)))
(allow edgetpu_app_server fwk_stats_service (service_manager (find)))
(allow edgetpu_app_server self (capability (ipc_lock)))
(allow edgetpu_app_server privapp_data_file (file (read map)))
(allow edgetpu_app_server shell_data_file (file (read map)))
(dontaudit domain deprecated_soc_prop (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(typetransition rilextensionservice_app tmpfs file appdomain_tmpfs)
(allow rilextensionservice_app rilextensionservice_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su rilextensionservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow rilextensionservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx rilextensionservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow rilextensionservice_app app_api_service (service_manager (find)))
(allow rilextensionservice_app radio_service (service_manager (find)))
(allow rilextensionservice_app property_socket (sock_file (write)))
(allow rilextensionservice_app init (unix_stream_socket (connectto)))
(allow rilextensionservice_app radio_prop (property_service (set)))
(allow rilextensionservice_app radio_prop (file (read getattr map open)))
(typetransition mosey_app tmpfs file appdomain_tmpfs)
(allow mosey_app mosey_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su mosey_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow mosey_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx mosey_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow mosey_app servicemanager (binder (call transfer)))
(allow servicemanager mosey_app (binder (call transfer)))
(allow mosey_app app_api_service (service_manager (find)))
(dontaudit mosey_app fwmarkd_socket (sock_file (write)))
(typetransition flipendo tmpfs file appdomain_tmpfs)
(allow flipendo flipendo_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su flipendo_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow flipendo appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx flipendo appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow flipendo fwk_stats_service (service_manager (find)))
(allow flipendo servicemanager (binder (call transfer)))
(allow servicemanager flipendo (binder (call transfer)))
(allow flipendo gpuservice (binder (call transfer)))
(allow gpuservice flipendo (binder (transfer)))
(allow flipendo gpuservice (fd (use)))
(allow flipendo app_api_service (service_manager (find)))
(allow flipendo color_display_service (service_manager (find)))
(dontaudit flipendo vendor_hwservice_type (hwservice_manager (find)))
(typetransition flag_flipper_app tmpfs file appdomain_tmpfs)
(allow flag_flipper_app flag_flipper_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su flag_flipper_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow flag_flipper_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx flag_flipper_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow flag_flipper_app aconfigd_socket (sock_file (write)))
(allow flag_flipper_app aconfigd (unix_stream_socket (connectto)))
(allow flag_flipper_app app_api_service (service_manager (find)))
(typetransition repair_mode_app tmpfs file appdomain_tmpfs)
(allow repair_mode_app repair_mode_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su repair_mode_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow repair_mode_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx repair_mode_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow repair_mode_app metadata_file (dir (search)))
(allow repair_mode_app repair_mode_metadata_file (dir (search)))
(allow repair_mode_app repair_mode_metadata_config_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow repair_mode_app repair_mode_metadata_config_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow repair_mode_app property_socket (sock_file (write)))
(allow repair_mode_app init (unix_stream_socket (connectto)))
(allow repair_mode_app repair_mode_init_prop (property_service (set)))
(allow repair_mode_app repair_mode_init_prop (file (read getattr map open)))
(allow repair_mode_app gsid_prop (file (read getattr map open)))
(allow repair_mode_app app_api_service (service_manager (find)))
(allow repair_mode_app system_api_service (service_manager (find)))
(typetransition turbo_adapter tmpfs file appdomain_tmpfs)
(allow turbo_adapter turbo_adapter_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su turbo_adapter_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow turbo_adapter appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx turbo_adapter appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow turbo_adapter app_api_service (service_manager (find)))
(allow turbo_adapter proc_uid_cputime_showstat (dir (ioctl read getattr lock open watch watch_reads search)))
(allow turbo_adapter proc_uid_cputime_showstat (file (ioctl read getattr lock map open watch watch_reads)))
(allow turbo_adapter proc_uid_cputime_showstat (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow turbo_adapter system_suspend_internal_server (binder (call transfer)))
(allow system_suspend_internal_server turbo_adapter (binder (transfer)))
(allow turbo_adapter system_suspend_internal_server (fd (use)))
(allow turbo_adapter suspend_prop (file (read getattr map open)))
(allow turbo_adapter property_socket (sock_file (write)))
(allow turbo_adapter init (unix_stream_socket (connectto)))
(allow turbo_adapter debug_prop (property_service (set)))
(allow turbo_adapter debug_prop (file (read getattr map open)))
(typetransition connectivity_thermal_power_manager tmpfs file appdomain_tmpfs)
(allow connectivity_thermal_power_manager connectivity_thermal_power_manager_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su connectivity_thermal_power_manager_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow connectivity_thermal_power_manager appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx connectivity_thermal_power_manager appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow connectivity_thermal_power_manager radio_service (service_manager (find)))
(allow connectivity_thermal_power_manager app_api_service (service_manager (find)))
(allow connectivity_thermal_power_manager system_api_service (service_manager (find)))
(typetransition pixelsystemservice_app tmpfs file appdomain_tmpfs)
(allow pixelsystemservice_app pixelsystemservice_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su pixelsystemservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow pixelsystemservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx pixelsystemservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow pixelsystemservice_app app_api_service (service_manager (find)))
(allow pixelsystemservice_app radio_service (service_manager (find)))
(allow pixelsystemservice_app statsmanager_service (service_manager (find)))
(allow pixelsystemservice_app property_socket (sock_file (write)))
(allow pixelsystemservice_app init (unix_stream_socket (connectto)))
(allow pixelsystemservice_app pixelsystemservice_contextualawareness_prop (property_service (set)))
(allow pixelsystemservice_app pixelsystemservice_contextualawareness_prop (file (read getattr map open)))
(allow init bluetooth_gci_exec (file (read getattr map execute open)))
(allow init bluetooth_gci (process (transition)))
(allow bluetooth_gci bluetooth_gci_exec (file (read getattr map execute open entrypoint)))
(dontaudit init bluetooth_gci (process (noatsecure)))
(allow init bluetooth_gci (process (siginh rlimitinh)))
(typetransition init bluetooth_gci_exec process bluetooth_gci)
(allow bluetooth_gci mnt_user_file (dir (search)))
(allow bluetooth_gci fuse (dir (ioctl read getattr lock open watch watch_reads search)))
(allow bluetooth_gci fuse (file (ioctl read getattr lock map open watch watch_reads)))
(allow bluetooth_gci media_rw_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
(allow bluetooth_gci media_rw_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow bluetooth_gci bluetooth_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
(allow bluetooth_gci bluetooth_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(typetransition dcservice_app tmpfs file appdomain_tmpfs)
(allow dcservice_app dcservice_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su dcservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow dcservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx dcservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow dcservice_app app_api_service (service_manager (find)))
(allow dcservice_app audioserver_service (service_manager (find)))
(allow dcservice_app nfc_service (service_manager (find)))
(allow dcservice_app radio_service (service_manager (find)))
(allow dcservice_app privapp_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow dcservice_app privapp_data_file (file (execute)))
(allow dcservice_app property_socket (sock_file (write)))
(allow dcservice_app init (unix_stream_socket (connectto)))
(allow dcservice_app ctl_start_prop (property_service (set)))
(allow dcservice_app ctl_start_prop (file (read getattr map open)))
(allow dcservice_app bluetooth_lea_prop (file (read getattr map open)))
(typetransition con_monitor_app tmpfs file appdomain_tmpfs)
(allow con_monitor_app con_monitor_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su con_monitor_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow con_monitor_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx con_monitor_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow con_monitor_app app_api_service (service_manager (find)))
(allow con_monitor_app batterystats_service (service_manager (find)))
(allow con_monitor_app virtual_device_service (service_manager (find)))
(allow con_monitor_app servicemanager (binder (call transfer)))
(allow servicemanager con_monitor_app (binder (transfer)))
(allow con_monitor_app servicemanager (fd (use)))
(allow con_monitor_app property_socket (sock_file (write)))
(allow con_monitor_app init (unix_stream_socket (connectto)))
(allow con_monitor_app radio_prop (property_service (set)))
(allow con_monitor_app radio_prop (file (read getattr map open)))
(typetransition grilservice_app tmpfs file appdomain_tmpfs)
(allow grilservice_app grilservice_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su grilservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow grilservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx grilservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(typetransition pixeldisplayservice_app tmpfs file appdomain_tmpfs)
(allow pixeldisplayservice_app pixeldisplayservice_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su pixeldisplayservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow pixeldisplayservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx pixeldisplayservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow pixeldisplayservice_app proc_vendor_sched (dir (ioctl read getattr lock open watch watch_reads search)))
(allow pixeldisplayservice_app proc_vendor_sched (file (write lock append map open)))
(allow pixeldisplayservice_app app_api_service (service_manager (find)))
(allow pixeldisplayservice_app cameraserver_service (service_manager (find)))
(typetransition pixelntnservice_app tmpfs file appdomain_tmpfs)
(allow pixelntnservice_app pixelntnservice_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su pixelntnservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow pixelntnservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx pixelntnservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow pixelntnservice_app app_api_service (service_manager (find)))
(allow pixelntnservice_app radio_service (service_manager (find)))
(allow pixelntnservice_app property_socket (sock_file (write)))
(allow pixelntnservice_app init (unix_stream_socket (connectto)))
(allow pixelntnservice_app telephony_modem_prop (property_service (set)))
(allow pixelntnservice_app telephony_modem_prop (file (read getattr map open)))
(allow pixelntnservice_app telephony_modemtype_prop (file (read getattr map open)))
(allow pixelntnservice_app property_socket (sock_file (write)))
(allow pixelntnservice_app init (unix_stream_socket (connectto)))
(allow pixelntnservice_app telephony_ntn_demo_mode_prop (property_service (set)))
(allow pixelntnservice_app telephony_ntn_demo_mode_prop (file (read getattr map open)))
(typetransition systemui_app tmpfs file appdomain_tmpfs)
(allow systemui_app systemui_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su systemui_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow systemui_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx systemui_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow systemui_app app_api_service (service_manager (find)))
(allow systemui_app network_score_service (service_manager (find)))
(allow systemui_app overlay_service (service_manager (find)))
(allow systemui_app color_display_service (service_manager (find)))
(allow systemui_app audioserver_service (service_manager (find)))
(allow systemui_app cameraserver_service (service_manager (find)))
(allow systemui_app mediaserver_service (service_manager (find)))
(allow systemui_app mediaextractor_service (service_manager (find)))
(allow systemui_app mediametrics_service (service_manager (find)))
(allow systemui_app radio_service (service_manager (find)))
(allow systemui_app vr_manager_service (service_manager (find)))
(allow systemui_app statsmanager_service (service_manager (find)))
(allow systemui_app nfc_service (service_manager (find)))
(allow systemui_app adb_service (service_manager (find)))
(allow systemui_app bluetooth_lea_prop (file (read getattr map open)))
(allow systemui_app keyguard_config_prop (file (read getattr map open)))
(allow systemui_app property_socket (sock_file (write)))
(allow systemui_app init (unix_stream_socket (connectto)))
(allow systemui_app bootanim_system_prop (property_service (set)))
(allow systemui_app bootanim_system_prop (file (read getattr map open)))
(allow systemui_app qemu_hw_prop (file (read getattr map open)))
(allow systemui_app property_socket (sock_file (write)))
(allow systemui_app init (unix_stream_socket (connectto)))
(allow systemui_app debug_prop (property_service (set)))
(allow systemui_app debug_prop (file (read getattr map open)))
(allow systemui_app radio_cdma_ecm_prop (file (read getattr map open)))
(allow systemui_app property_socket (sock_file (write)))
(allow systemui_app init (unix_stream_socket (connectto)))
(allow systemui_app vendor_sysuig_prop (property_service (set)))
(allow systemui_app vendor_sysuig_prop (file (read getattr map open)))
(allow systemui_app property_socket (sock_file (write)))
(allow systemui_app init (unix_stream_socket (connectto)))
(allow systemui_app debug_tracing_desktop_mode_visible_tasks_prop (property_service (set)))
(allow systemui_app debug_tracing_desktop_mode_visible_tasks_prop (file (read getattr map open)))
(typetransition vendor_rcs_app tmpfs file appdomain_tmpfs)
(allow vendor_rcs_app vendor_rcs_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su vendor_rcs_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow vendor_rcs_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx vendor_rcs_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow vendor_rcs_app app_api_service (service_manager (find)))
(allow vendor_rcs_app radio_service (service_manager (find)))
(typetransition vendor_rcs_service_app tmpfs file appdomain_tmpfs)
(allow vendor_rcs_service_app vendor_rcs_service_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su vendor_rcs_service_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow vendor_rcs_service_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx vendor_rcs_service_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow vendor_rcs_service_app app_api_service (service_manager (find)))
(allow vendor_rcs_service_app radio_service (service_manager (find)))
(typetransition vendor_satellite_service tmpfs file appdomain_tmpfs)
(allow vendor_satellite_service vendor_satellite_service_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su vendor_satellite_service_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow vendor_satellite_service appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx vendor_satellite_service appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow vendor_satellite_service app_api_service (service_manager (find)))
(typetransition vendor_satellite_service vendor_satellite_service anon_inode "[userfaultfd]" vendor_satellite_service_userfaultfd)
(typetransition vendor_rcs_service_app vendor_rcs_service_app anon_inode "[userfaultfd]" vendor_rcs_service_app_userfaultfd)
(typetransition vendor_rcs_app vendor_rcs_app anon_inode "[userfaultfd]" vendor_rcs_app_userfaultfd)
(typetransition systemui_app systemui_app anon_inode "[userfaultfd]" systemui_app_userfaultfd)
(typetransition pixelntnservice_app pixelntnservice_app anon_inode "[userfaultfd]" pixelntnservice_app_userfaultfd)
(typetransition pixeldisplayservice_app pixeldisplayservice_app anon_inode "[userfaultfd]" pixeldisplayservice_app_userfaultfd)
(typetransition grilservice_app grilservice_app anon_inode "[userfaultfd]" grilservice_app_userfaultfd)
(typetransition con_monitor_app con_monitor_app anon_inode "[userfaultfd]" con_monitor_app_userfaultfd)
(typetransition dcservice_app dcservice_app anon_inode "[userfaultfd]" dcservice_app_userfaultfd)
(typetransition pixelsystemservice_app pixelsystemservice_app anon_inode "[userfaultfd]" pixelsystemservice_app_userfaultfd)
(typetransition connectivity_thermal_power_manager connectivity_thermal_power_manager anon_inode "[userfaultfd]" connectivity_thermal_power_manager_userfaultfd)
(typetransition turbo_adapter turbo_adapter anon_inode "[userfaultfd]" turbo_adapter_userfaultfd)
(typetransition repair_mode_app repair_mode_app anon_inode "[userfaultfd]" repair_mode_app_userfaultfd)
(typetransition flag_flipper_app flag_flipper_app anon_inode "[userfaultfd]" flag_flipper_app_userfaultfd)
(typetransition flipendo flipendo anon_inode "[userfaultfd]" flipendo_userfaultfd)
(typetransition mosey_app mosey_app anon_inode "[userfaultfd]" mosey_app_userfaultfd)
(typetransition rilextensionservice_app rilextensionservice_app anon_inode "[userfaultfd]" rilextensionservice_app_userfaultfd)
(typetransition factory_ota_app factory_ota_app anon_inode "[userfaultfd]" factory_ota_app_userfaultfd)
(typeattribute base_adevtool_typeattr_0)
(typeattributeset base_adevtool_typeattr_0 (and (domain) (not (crash_dump runas_app simpleperf vendor_satellite_service))))
(typeattribute base_adevtool_typeattr_1)
(typeattributeset base_adevtool_typeattr_1 (and (appdomain) (not (runas_app shell simpleperf vendor_satellite_service))))
(typeattribute base_adevtool_typeattr_2)
(typeattributeset base_adevtool_typeattr_2 (and (vendor_satellite_service) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_3)
(typeattributeset base_adevtool_typeattr_3 (and (domain) (not (vendor_satellite_service))))
(typeattribute base_adevtool_typeattr_4)
(typeattributeset base_adevtool_typeattr_4 (and (domain) (not (crash_dump runas_app simpleperf vendor_rcs_service_app))))
(typeattribute base_adevtool_typeattr_5)
(typeattributeset base_adevtool_typeattr_5 (and (appdomain) (not (runas_app shell simpleperf vendor_rcs_service_app))))
(typeattribute base_adevtool_typeattr_6)
(typeattributeset base_adevtool_typeattr_6 (and (vendor_rcs_service_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_7)
(typeattributeset base_adevtool_typeattr_7 (and (domain) (not (vendor_rcs_service_app))))
(typeattribute base_adevtool_typeattr_8)
(typeattributeset base_adevtool_typeattr_8 (and (domain) (not (crash_dump runas_app simpleperf vendor_rcs_app))))
(typeattribute base_adevtool_typeattr_9)
(typeattributeset base_adevtool_typeattr_9 (and (appdomain) (not (runas_app shell simpleperf vendor_rcs_app))))
(typeattribute base_adevtool_typeattr_10)
(typeattributeset base_adevtool_typeattr_10 (and (vendor_rcs_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_11)
(typeattributeset base_adevtool_typeattr_11 (and (domain) (not (vendor_rcs_app))))
(typeattribute base_adevtool_typeattr_12)
(typeattributeset base_adevtool_typeattr_12 (and (domain) (not (crash_dump runas_app simpleperf systemui_app))))
(typeattribute base_adevtool_typeattr_13)
(typeattributeset base_adevtool_typeattr_13 (and (appdomain) (not (runas_app shell simpleperf systemui_app))))
(typeattribute base_adevtool_typeattr_14)
(typeattributeset base_adevtool_typeattr_14 (and (systemui_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_15)
(typeattributeset base_adevtool_typeattr_15 (and (domain) (not (systemui_app))))
(typeattribute base_adevtool_typeattr_16)
(typeattributeset base_adevtool_typeattr_16 (and (domain) (not (crash_dump runas_app simpleperf pixelntnservice_app))))
(typeattribute base_adevtool_typeattr_17)
(typeattributeset base_adevtool_typeattr_17 (and (appdomain) (not (runas_app shell simpleperf pixelntnservice_app))))
(typeattribute base_adevtool_typeattr_18)
(typeattributeset base_adevtool_typeattr_18 (and (pixelntnservice_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_19)
(typeattributeset base_adevtool_typeattr_19 (and (domain) (not (pixelntnservice_app))))
(typeattribute base_adevtool_typeattr_20)
(typeattributeset base_adevtool_typeattr_20 (and (domain) (not (crash_dump runas_app simpleperf pixeldisplayservice_app))))
(typeattribute base_adevtool_typeattr_21)
(typeattributeset base_adevtool_typeattr_21 (and (appdomain) (not (runas_app shell simpleperf pixeldisplayservice_app))))
(typeattribute base_adevtool_typeattr_22)
(typeattributeset base_adevtool_typeattr_22 (and (pixeldisplayservice_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_23)
(typeattributeset base_adevtool_typeattr_23 (and (domain) (not (pixeldisplayservice_app))))
(typeattribute base_adevtool_typeattr_24)
(typeattributeset base_adevtool_typeattr_24 (and (domain) (not (crash_dump runas_app simpleperf grilservice_app))))
(typeattribute base_adevtool_typeattr_25)
(typeattributeset base_adevtool_typeattr_25 (and (appdomain) (not (runas_app shell simpleperf grilservice_app))))
(typeattribute base_adevtool_typeattr_26)
(typeattributeset base_adevtool_typeattr_26 (and (grilservice_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_27)
(typeattributeset base_adevtool_typeattr_27 (and (domain) (not (grilservice_app))))
(typeattribute base_adevtool_typeattr_28)
(typeattributeset base_adevtool_typeattr_28 (and (domain) (not (crash_dump runas_app simpleperf con_monitor_app))))
(typeattribute base_adevtool_typeattr_29)
(typeattributeset base_adevtool_typeattr_29 (and (appdomain) (not (runas_app shell simpleperf con_monitor_app))))
(typeattribute base_adevtool_typeattr_30)
(typeattributeset base_adevtool_typeattr_30 (and (con_monitor_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_31)
(typeattributeset base_adevtool_typeattr_31 (and (domain) (not (con_monitor_app))))
(typeattribute base_adevtool_typeattr_32)
(typeattributeset base_adevtool_typeattr_32 (and (domain) (not (crash_dump runas_app simpleperf dcservice_app))))
(typeattribute base_adevtool_typeattr_33)
(typeattributeset base_adevtool_typeattr_33 (and (appdomain) (not (runas_app shell simpleperf dcservice_app))))
(typeattribute base_adevtool_typeattr_34)
(typeattributeset base_adevtool_typeattr_34 (and (dcservice_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_35)
(typeattributeset base_adevtool_typeattr_35 (and (domain) (not (dcservice_app))))
(typeattribute base_adevtool_typeattr_36)
(typeattributeset base_adevtool_typeattr_36 (and (domain) (not (crash_dump runas_app simpleperf pixelsystemservice_app))))
(typeattribute base_adevtool_typeattr_37)
(typeattributeset base_adevtool_typeattr_37 (and (appdomain) (not (runas_app shell simpleperf pixelsystemservice_app))))
(typeattribute base_adevtool_typeattr_38)
(typeattributeset base_adevtool_typeattr_38 (and (pixelsystemservice_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_39)
(typeattributeset base_adevtool_typeattr_39 (and (domain) (not (pixelsystemservice_app))))
(typeattribute base_adevtool_typeattr_40)
(typeattributeset base_adevtool_typeattr_40 (and (domain) (not (crash_dump runas_app simpleperf connectivity_thermal_power_manager))))
(typeattribute base_adevtool_typeattr_41)
(typeattributeset base_adevtool_typeattr_41 (and (appdomain) (not (runas_app shell simpleperf connectivity_thermal_power_manager))))
(typeattribute base_adevtool_typeattr_42)
(typeattributeset base_adevtool_typeattr_42 (and (connectivity_thermal_power_manager) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_43)
(typeattributeset base_adevtool_typeattr_43 (and (domain) (not (connectivity_thermal_power_manager))))
(typeattribute base_adevtool_typeattr_44)
(typeattributeset base_adevtool_typeattr_44 (and (domain) (not (crash_dump runas_app simpleperf turbo_adapter))))
(typeattribute base_adevtool_typeattr_45)
(typeattributeset base_adevtool_typeattr_45 (and (appdomain) (not (runas_app shell simpleperf turbo_adapter))))
(typeattribute base_adevtool_typeattr_46)
(typeattributeset base_adevtool_typeattr_46 (and (turbo_adapter) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_47)
(typeattributeset base_adevtool_typeattr_47 (and (domain) (not (turbo_adapter))))
(typeattribute base_adevtool_typeattr_48)
(typeattributeset base_adevtool_typeattr_48 (and (domain) (not (crash_dump runas_app simpleperf repair_mode_app))))
(typeattribute base_adevtool_typeattr_49)
(typeattributeset base_adevtool_typeattr_49 (and (appdomain) (not (runas_app shell simpleperf repair_mode_app))))
(typeattribute base_adevtool_typeattr_50)
(typeattributeset base_adevtool_typeattr_50 (and (repair_mode_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_51)
(typeattributeset base_adevtool_typeattr_51 (and (domain) (not (repair_mode_app))))
(typeattribute base_adevtool_typeattr_52)
(typeattributeset base_adevtool_typeattr_52 (and (domain) (not (crash_dump runas_app simpleperf flag_flipper_app))))
(typeattribute base_adevtool_typeattr_53)
(typeattributeset base_adevtool_typeattr_53 (and (appdomain) (not (runas_app shell simpleperf flag_flipper_app))))
(typeattribute base_adevtool_typeattr_54)
(typeattributeset base_adevtool_typeattr_54 (and (flag_flipper_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_55)
(typeattributeset base_adevtool_typeattr_55 (and (domain) (not (flag_flipper_app))))
(typeattribute base_adevtool_typeattr_56)
(typeattributeset base_adevtool_typeattr_56 (and (domain) (not (crash_dump runas_app simpleperf flipendo))))
(typeattribute base_adevtool_typeattr_57)
(typeattributeset base_adevtool_typeattr_57 (and (appdomain) (not (runas_app shell simpleperf flipendo))))
(typeattribute base_adevtool_typeattr_58)
(typeattributeset base_adevtool_typeattr_58 (and (flipendo) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_59)
(typeattributeset base_adevtool_typeattr_59 (and (domain) (not (flipendo))))
(typeattribute base_adevtool_typeattr_60)
(typeattributeset base_adevtool_typeattr_60 (and (domain) (not (crash_dump runas_app simpleperf mosey_app))))
(typeattribute base_adevtool_typeattr_61)
(typeattributeset base_adevtool_typeattr_61 (and (appdomain) (not (runas_app shell simpleperf mosey_app))))
(typeattribute base_adevtool_typeattr_62)
(typeattributeset base_adevtool_typeattr_62 (and (mosey_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_63)
(typeattributeset base_adevtool_typeattr_63 (and (domain) (not (mosey_app))))
(typeattribute base_adevtool_typeattr_64)
(typeattributeset base_adevtool_typeattr_64 (and (domain) (not (crash_dump runas_app simpleperf rilextensionservice_app))))
(typeattribute base_adevtool_typeattr_65)
(typeattributeset base_adevtool_typeattr_65 (and (appdomain) (not (runas_app shell simpleperf rilextensionservice_app))))
(typeattribute base_adevtool_typeattr_66)
(typeattributeset base_adevtool_typeattr_66 (and (rilextensionservice_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_67)
(typeattributeset base_adevtool_typeattr_67 (and (domain) (not (rilextensionservice_app))))
(typeattribute base_adevtool_typeattr_68)
(typeattributeset base_adevtool_typeattr_68 (and (domain) (not (edgetpu_app_server))))
(typeattribute base_adevtool_typeattr_69)
(typeattributeset base_adevtool_typeattr_69 (and (domain) (not (hal_audio_parameter_parser))))
(typeattribute base_adevtool_typeattr_70)
(typeattributeset base_adevtool_typeattr_70 (and (domain) (not (crash_dump runas_app simpleperf factory_ota_app))))
(typeattribute base_adevtool_typeattr_71)
(typeattributeset base_adevtool_typeattr_71 (and (appdomain) (not (runas_app shell simpleperf factory_ota_app))))
(typeattribute base_adevtool_typeattr_72)
(typeattributeset base_adevtool_typeattr_72 (and (factory_ota_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_73)
(typeattributeset base_adevtool_typeattr_73 (and (domain) (not (factory_ota_app))))