(typetransition vendor_pbcs_app tmpfs file appdomain_tmpfs)
(allow vendor_pbcs_app vendor_pbcs_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su vendor_pbcs_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow vendor_pbcs_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx vendor_pbcs_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(dontaudit vendor_pbcs_app system_app_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(allow vendor_pbcs_app app_api_service (service_manager (find)))
(allow vendor_pbcs_app cameraserver_service (service_manager (find)))
(allow vendor_pbcs_app camera_binder_service (service_manager (add find)))
(allow vendor_pbcs_app camera_cameraidremapper_service (service_manager (add find)))
(allow vendor_pbcs_app camera_lyricconfigprovider_service (service_manager (add find)))
(typetransition vendor_pcs_app tmpfs file appdomain_tmpfs)
(allow vendor_pcs_app vendor_pcs_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su vendor_pcs_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow vendor_pcs_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx vendor_pcs_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow vendor_pcs_app app_api_service (service_manager (find)))
(allow vendor_pcs_app audioserver_service (service_manager (find)))
(allow vendor_pcs_app cameraserver_service (service_manager (find)))
(allow vendor_pcs_app drmserver_service (service_manager (find)))
(allow vendor_pcs_app mediaserver_service (service_manager (find)))
(allow vendor_pcs_app mediametrics_service (service_manager (find)))
(allow vendor_pcs_app nfc_service (service_manager (find)))
(allow vendor_pcs_app radio_service (service_manager (find)))
(allow vendor_pcs_app camera_cameraidremapper_service (service_manager (find)))
(allow vendor_pcs_app camera_lyricconfigprovider_service (service_manager (find)))
(allow vendor_pcs_app cache_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vendor_pcs_app cache_recovery_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vendor_pcs_app cache_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vendor_pcs_app cache_recovery_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vendor_pcs_app cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_pcs_app media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vendor_pcs_app media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vendor_pcs_app preloads_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vendor_pcs_app preloads_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_pcs_app preloads_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_pcs_app preloads_media_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vendor_pcs_app preloads_media_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_pcs_app preloads_media_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit vendor_pcs_app usb_device (dir (read open search)))
(dontaudit vendor_pcs_app device (dir (read)))
(typetransition better_bug_app tmpfs file appdomain_tmpfs)
(allow better_bug_app better_bug_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su better_bug_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow better_bug_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx better_bug_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow better_bug_app app_api_service (service_manager (find)))
(allow better_bug_app mediaserver_service (service_manager (find)))
(allow better_bug_app radio_service (service_manager (find)))
(allow better_bug_app system_api_service (service_manager (find)))
(allow better_bug_app privapp_data_file (file (execute)))
(allow better_bug_app privapp_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow better_bug_app shell_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow better_bug_app shell_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow better_bug_app trace_data_file (file (read getattr)))
(allow better_bug_app wm_trace_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow better_bug_app wm_trace_data_file (file (getattr)))
(allow better_bug_app perfetto_traces_bugreport_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow better_bug_app perfetto_traces_bugreport_data_file (file (getattr)))
(allow better_bug_app perfetto (fd (use)))
(allow better_bug_app perfetto_traces_data_file (file (read getattr)))
(allow better_bug_app property_socket (sock_file (write)))
(allow better_bug_app init (unix_stream_socket (connectto)))
(allow better_bug_app ctl_start_prop (property_service (set)))
(allow better_bug_app ctl_start_prop (file (read getattr map open)))
(allow better_bug_app system_boot_reason_prop (file (read getattr map open)))
(typetransition google_camera_app tmpfs file appdomain_tmpfs)
(allow google_camera_app google_camera_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su google_camera_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow google_camera_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx google_camera_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow google_camera_app app_api_service (service_manager (find)))
(allow google_camera_app audioserver_service (service_manager (find)))
(allow google_camera_app cameraserver_service (service_manager (find)))
(allow google_camera_app mediaextractor_service (service_manager (find)))
(allow google_camera_app mediametrics_service (service_manager (find)))
(allow google_camera_app mediaserver_service (service_manager (find)))
(dontaudit google_camera_app vendor_default_prop (file (getattr map open)))
(typetransition omadm_app tmpfs file appdomain_tmpfs)
(allow omadm_app omadm_app_userfaultfd (anon_inode (ioctl read create)))
(dontaudit su omadm_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow omadm_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
(allowx omadm_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
(allow omadm_app app_api_service (service_manager (find)))
(allow omadm_app radio_service (service_manager (find)))
(allow permissioncontroller_app proc_vendor_sched (dir (ioctl read getattr lock open watch watch_reads search)))
(allow permissioncontroller_app proc_vendor_sched (file (write lock append map open)))
(allow radio uce_service (service_manager (add find)))
(typetransition omadm_app omadm_app anon_inode "[userfaultfd]" omadm_app_userfaultfd)
(typetransition google_camera_app google_camera_app anon_inode "[userfaultfd]" google_camera_app_userfaultfd)
(typetransition better_bug_app better_bug_app anon_inode "[userfaultfd]" better_bug_app_userfaultfd)
(typetransition vendor_pcs_app vendor_pcs_app anon_inode "[userfaultfd]" vendor_pcs_app_userfaultfd)
(typetransition vendor_pbcs_app vendor_pbcs_app anon_inode "[userfaultfd]" vendor_pbcs_app_userfaultfd)
(typeattribute base_adevtool_typeattr_0)
(typeattributeset base_adevtool_typeattr_0 (and (domain) (not (crash_dump runas_app simpleperf omadm_app))))
(typeattribute base_adevtool_typeattr_1)
(typeattributeset base_adevtool_typeattr_1 (and (appdomain) (not (runas_app shell simpleperf omadm_app))))
(typeattribute base_adevtool_typeattr_2)
(typeattributeset base_adevtool_typeattr_2 (and (omadm_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_3)
(typeattributeset base_adevtool_typeattr_3 (and (domain) (not (omadm_app))))
(typeattribute base_adevtool_typeattr_4)
(typeattributeset base_adevtool_typeattr_4 (and (domain) (not (crash_dump runas_app simpleperf google_camera_app))))
(typeattribute base_adevtool_typeattr_5)
(typeattributeset base_adevtool_typeattr_5 (and (appdomain) (not (runas_app shell simpleperf google_camera_app))))
(typeattribute base_adevtool_typeattr_6)
(typeattributeset base_adevtool_typeattr_6 (and (google_camera_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_7)
(typeattributeset base_adevtool_typeattr_7 (and (domain) (not (google_camera_app))))
(typeattribute base_adevtool_typeattr_8)
(typeattributeset base_adevtool_typeattr_8 (and (domain) (not (crash_dump runas_app simpleperf better_bug_app))))
(typeattribute base_adevtool_typeattr_9)
(typeattributeset base_adevtool_typeattr_9 (and (appdomain) (not (runas_app shell simpleperf better_bug_app))))
(typeattribute base_adevtool_typeattr_10)
(typeattributeset base_adevtool_typeattr_10 (and (better_bug_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_11)
(typeattributeset base_adevtool_typeattr_11 (and (domain) (not (better_bug_app))))
(typeattribute base_adevtool_typeattr_12)
(typeattributeset base_adevtool_typeattr_12 (and (domain) (not (crash_dump runas_app simpleperf vendor_pcs_app))))
(typeattribute base_adevtool_typeattr_13)
(typeattributeset base_adevtool_typeattr_13 (and (appdomain) (not (runas_app shell simpleperf vendor_pcs_app))))
(typeattribute base_adevtool_typeattr_14)
(typeattributeset base_adevtool_typeattr_14 (and (vendor_pcs_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_15)
(typeattributeset base_adevtool_typeattr_15 (and (domain) (not (vendor_pcs_app))))
(typeattribute base_adevtool_typeattr_16)
(typeattributeset base_adevtool_typeattr_16 (and (domain) (not (crash_dump runas_app simpleperf vendor_pbcs_app))))
(typeattribute base_adevtool_typeattr_17)
(typeattributeset base_adevtool_typeattr_17 (and (appdomain) (not (runas_app shell simpleperf vendor_pbcs_app))))
(typeattribute base_adevtool_typeattr_18)
(typeattributeset base_adevtool_typeattr_18 (and (vendor_pbcs_app) (not (runas_app shell simpleperf))))
(typeattribute base_adevtool_typeattr_19)
(typeattributeset base_adevtool_typeattr_19 (and (domain) (not (vendor_pbcs_app))))