# /efs allow vold efs_file:dir r_dir_perms; # /dev/block/mmcblk0p[0-9] allow vold emmcblk_device:dir create_dir_perms; allow vold emmcblk_device:blk_file { setattr unlink rw_file_perms }; allow vold sysfs_mmc:file w_file_perms; r_dir_file(vold, proc_dt_firmware)