# Additional rules for shell allow shell toolbox_exec:file { read getattr open execute execute_no_trans }; allow shell logcat_exec:file { read getattr open execute execute_no_trans }; allow shell serial_device:chr_file rw_file_perms; allow shell proc_cpuinfo:file mounton; # Additional shell permissions seen on game team tablets allow shell metadata_file:dir r_dir_perms; allow shell metadata_file:file r_file_perms;