#============= hal_gnss_default ============== allow hal_gnss_default vndbinder_device:chr_file { ioctl open read write map }; allow hal_gnss_default self:vsock_socket create_socket_perms_no_ioctl;