# Allow keystore to operate using qseecom_device
allow keystore tee_device:chr_file rw_file_perms;