allow hal_fingerprint_default system_data_file:dir { add_name create open read write remove_name rmdir };
allow hal_fingerprint_default system_data_file:file { getattr open read };
allow hal_fingerprint_default tee_device:chr_file ioctl;
allow hal_fingerprint_default firmware_file:file { getattr open read };
allow hal_fingerprint_default tee_device:chr_file { open read write };
allow hal_fingerprint_default vfsspi_device:chr_file ioctl;