sepolicy/vendor/tee.te

allow tee efs_file:dir { open read };
allow tee mnt_vendor_file:dir search;

dontaudit tee system_prop:property_service set;
dontaudit tee shell_data_file:dir search;