1type rpmb_virt_device, dev_type;
2
3allow tee rpmb_virt_device:chr_file { open read write };
4allow tee self:capability { setgid setuid };
5