allow hal_health_default sysfs:file rw_file_perms; allow hal_health_default sysfs_power:file rw_file_perms; allow hal_health_default sysfs_power:dir { search }; allow hal_health_default sysfs_type:dir search; allow hal_health_default sysfs_batteryinfo:file rw_file_perms; allow healthd device:dir r_dir_perms; dontaudit healthd self:capability { dac_override sys_admin dac_read_search }; r_dir_file(hal_health_default, sysfs_batteryinfo) rw_rockchip_graphic_device(hal_health_default)