# Binder
allow hal_fingerprint_default vendor_hal_perf_default:binder call;
allow hal_fingerprint_default vendor_hal_perf_hwservice:hwservice_manager find;

# Props
set_prop(hal_fingerprint_default, vendor_fp_prop)
get_prop(system_server, vendor_fp_prop);

# Sysfs
allow hal_fingerprint_default {
  sysfs_rtc
  vendor_sysfs_fingerprint
  vendor_sysfs_spss
}: file rw_file_perms;

allow hal_fingerprint_default {
  input_device
  sysfs_rtc
  vendor_sysfs_fingerprint
  vendor_sysfs_spss
}: dir r_dir_perms;

# Dev nodes
allow hal_fingerprint_default {
  input_device
  tee_device
  uhid_device
  vendor_fingerprint_device
}: chr_file rw_file_perms;

# Data
allow hal_fingerprint_default vendor_fingerprint_data_file:dir rw_dir_perms;
allow hal_fingerprint_default vendor_fingerprint_data_file:file create_file_perms;

allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl;

r_dir_file(hal_fingerprint_default, firmware_file)