allow hal_gatekeeper_default tz_device:chr_file rw_file_perms; allow hal_gatekeeper_default efs_file:dir search; allow hal_gatekeeper_default sec_poc_file:dir search; allow hal_gatekeeper_default prov_efs_file:dir create_dir_perms; allow hal_gatekeeper_default prov_efs_file:file create_file_perms; get_prop(hal_gatekeeper_default, tzdaemon_prop) get_prop(hal_gatekeeper_default, vendor_tztsdaemon_prop) set_prop(hal_gatekeeper_default, dumpstate_options_prop)