allow hal_confirmationui_server tee_device:chr_file rw_file_perms;
allow hal_confirmationui_server ion_device:chr_file r_file_perms;

allow hal_confirmationui_server hal_tui_comm_hwservice:hwservice_manager find;

vndbinder_use(hal_confirmationui_server)

binder_call(hal_confirmationui_server, keystore)

allow hal_confirmationui_server input_device:chr_file rw_file_perms;
allow hal_confirmationui_server input_device:dir r_dir_perms;