allow system_server alarm_boot_prop:file r_file_perms;
allow system_server persist_file:dir write;
allow system_server sysfs_fingerprint:file rw_file_perms;

allow system_server install_data_file:file getattr;

# /vendor/usr/keylayout
r_dir_file(system_server, idc_file)
# /vendor/usr/idc
r_dir_file(system_server, keylayout_file)