# vold goes through /proc and opens each dir as O_RDONLY # to gather information about all PIDS. # It does not need access to /proc/irq which is labeled as # proc_irq on bullhead # See system/vold commit 66270a21df1058434e4d63691221f11ff5387a0f dontaudit vold proc_irq:dir { read open }; get_prop(vold, qseecomtee_prop) # Allow vold to access zram allow vold swap_block_device:blk_file getattr;