steve@server-CS24-SC:~/Sean/device/samsung/klimtlte$ grep denied denials.log | audit2allow -mp ../../../out/target/product/klimtlte/root/sepolicy

module p 1.0;

require {
        type vold;
        type system_server;
        type rild;
        type mediaserver;
        type default_prop;
        type efs_file;
        type untrusted_app;
        type bootanim_exec;
        class capability dac_override;
        class property_service set;
        class file getattr;
        class dir { search open };
}

#============= rild ==============
allow rild mediaserver:dir search;
allow rild self:capability dac_override;

#============= system_server ==============
allow system_server default_prop:property_service set;

#============= untrusted_app ==============
allow untrusted_app bootanim_exec:file getattr;

#============= vold ==============
allow vold efs_file:dir open;