allow hal_health_default sysfs:file { ioctl read getattr lock open watch watch_reads }; allow hal_health_default sysfs_battery:file { getattr open read }; allow hal_health_default sysfs_battery:dir search;