allow rild self:netlink_kobject_uevent_socket { create setopt bind read };
allow rild app_data_file:dir { write search read remove_name open add_name };
allow rild app_data_file:file { setattr read lock create write getattr unlink open };

allow system self:capability sys_module;
allow system adbd_socket:sock_file write;
allow system uinput_device:chr_file { read write ioctl open };
allow system zygote:file write;
allow system zygote:process sigkill;

allow vold sdcard_external:file { read write getattr open };

allow zygote app_data_file:dir { search getattr };
allow zygote app_data_file:file { write getattr setattr read lock open };
allow zygote ashmem_device:chr_file execute;