allow vold bootdevice_block_device:blk_file { read open ioctl};
allow vold proc_ufs_debug:file { open write read getattr };