allow hal_fingerprint sysfs_fingerprint:dir r_dir_perms; allow hal_fingerprint sysfs_fingerprint:file rw_file_perms; allow hal_fingerprint tee_device:chr_file rw_file_perms; allow hal_fingerprint uhid_device:chr_file rw_file_perms; allow hal_fingerprint sysfs:dir { open read };