sepolicy/vendor/domain.te

# domain.te

# /sys/kernel/debug/mali
allow domain debugfs_mali:dir search;

# /sys/kernel/debug/mali/mem
allow domain debugfs_mali_mem:dir search;

# /sys/kernel/debug/dma_buf
allow domain debugfs_ion_dma:dir search;

# /sys/kernel/debug/ion
allow domain debugfs_ion:dir search;

# /sys/kernel/debug/tracing/trace_marker
allow domain debugfs_trace_marker:file getattr;

# /efs
dontaudit domain efs_file:lnk_file read;