universal7904: sepolicy: Address hal_gatekeeper_default denials
Reland 219a4b2d531acb4410bce5e9d62ccc244ad6afc0
Change-Id: Iaeb156ab3111f2eacc93a9db0451d89fe8eeb691
diff --git a/sepolicy/vendor/hal_gatekeeper_default.te b/sepolicy/vendor/hal_gatekeeper_default.te
index 4b6ed04..6f38a82 100644
--- a/sepolicy/vendor/hal_gatekeeper_default.te
+++ b/sepolicy/vendor/hal_gatekeeper_default.te
@@ -1,3 +1,3 @@
-allow hal_gatekeeper_default efs_file:dir search;
-allow hal_gatekeeper_default efs_file:file { read open write };
+allow hal_gatekeeper_default efs_file:dir rw_dir_perms;
+allow hal_gatekeeper_default efs_file:file create_file_perms;
allow hal_gatekeeper_default mnt_vendor_file:dir search;