profile aosp_default flags=(attach_disconnected) {

    signal,
    ptrace,
    mount,
    umount,
    capability syslog,
    capability sys_resource,
    capability sys_ptrace,
    capability sys_nice,
    capability sys_admin,
    capability setuid,
    capability setpcap,
    capability setgid,
    capability net_raw,
    capability net_admin,
    capability net_bind_service,
    capability kill,
    capability ipc_lock,
    capability fsetid,
    capability fowner,
    capability dac_read_search,
    capability dac_override,
    capability chown,
    capability mknod,
    capability setfcap,

    ########## GENERAL AOSP RULES ##########

    / r,
    /** r,

    /acct/** w,

    /apex/** wk,
    /apex/**.oat m,
    /apex/**.so m,
    /apex/**.apk m,
    /apex/**/bin/* ix,

    /data/ w,
    /data/*/ w,
    /data/user{,_de}/** w,
    /data/user{,_de}/0/*/app_webview/** k,
    /data/user{,_de}/0/*/databases/** k,
    /data/user{,_de}/0/*/cache/** k,
    /data/tombstones/** w,
    /data/system/** wk,
    /data/system/recoverablekeystore.db{,-shm} k,
    /data/system/locksettings.db{,-shm} k,
    /data/system/watchlist_report.db k,
    /data/system_{ce,de}/** w,
    /data/system_{ce,de}/0/accounts_{ce,de}.db k,
    /data/property/** w,
    /data/data/** w,
    /data/data/**.db{,-shm} k,
    /data/anr/** w,
    /data/backup/** w,
    /data/misc{_ce,_de}/** wk,
    /data/misc/** wk,
    /data/media/** w,
    /data/dalvik-cache/** wm,
    /data/dalvik-cache/arm{,64}/** k,
    /data/app/** w,
    /data/local/** w,
    /data/apex/** w,
    /data/vendor/** w,
    /data/nfc/** w,
    /data/cache/** w,
    /data/vendor_{ce,de}/** w,
    /data/gsi/** w,
    l /data/system/appops/history/** -> /data/system/appops/history_bak/*,
    l /data/tombstones/** -> /data/tombstones/**,

    /data_mirror/** w,

    /dev/* w,
    /dev/*/ w,
    /dev/binderfs/* w,
    /dev/__properties__/* w,
    /dev/cpuset/** w,
    /dev/boringssl/** w,
    /dev/socket/** w,
    /dev/snd/* w,
    /dev/net/* w,
    /dev/input/* w,
    /dev/dri/* w,
    /dev/pts/** w,
    /dev/bus/** w,
    /dev/graphics/** w,
    /dev/shm/** w,

    /linkerconfig/** w,

    /metadata/** w,

    /mnt/*/ w,
    /mnt/* w,
    /mnt/user/** w,
    /mnt/secure/** w,
    /mnt/runtime/** w,
    /mnt/pass_through/** w,

    /proc/* w,
    /proc/*/task/*/attr/* w,
    /proc/sys/net/ipv{4,6}/** w,
    /proc/sys/net/core/* w,
    /proc/pressure/* w,
    /proc/*/oom_score_adj w,
    /proc/sys/** w,
    /proc/*/net/* w,
    /proc/sys/net/unix/* w,
    /proc/sys/fs/verity/* w,
    /proc/*/task/*/comm w,
    /proc/*/clear_refs w,
    /proc/uid_procstat/** w,
    /proc/uid_cputime/** w,

    /storage/emulated/0/** wk,

    /sys/fs/** w,
    /sys/kernel/tracing/** w,
    /sys/kernel/tracing/ w,
    /sys/kernel/debug/** w,
    /sys/devices/** w,
    /sys/module/** w,

    /system/lib{,64}/**.so m,
    /system/priv-app/** m,
    /system/product/** m,
    /system/framework/** mwk,
    /system/etc/* wk,
    /system/bin/* ix,
    /system/bin/hw/* ix,
    /system/xbin/* ix,

    /tmp/tmp.*/** w,
    /tmp/tmp.*/ w,

    /uid_*/** w,
    /uid_*/ w,

    /vendor/lib{,64}/** m,
    /vendor/bin/** ix,
    /vendor/etc/** w,

    ########## APP/GAME-SPECIFIC ##########

    /data/app/**/{oat,lib}/arm{,64}/** k,
    /data/app/** m,
    /data/data/**/databases/** k,
    /data/data/**/files/** k,
    /data/data/**/{,code_}cache/** k,
    /data/data/**/{,no_}backup/** k,
    /data/data/**/lib-main/** k,
    /data/data/**/app_{chrome,webview}/** k,
    /data/data/**/shared_prefs/** wk,
}
