PRAGMA journal_mode = DELETE;
-.output "/opt/etc/smack/boot-rules.smack"
-SELECT subject, object, access_to_str(access)
-FROM all_smack_binary_rules
-WHERE all_smack_binary_rules.is_volatile = 0;
+BEGIN TRANSACTION;
+
+-- Delete volatile rules
+DELETE FROM app_permission WHERE is_volatile = 1;
+
+
+.output "/opt/etc/smack/boot-rules.smack"
+SELECT subject, object, access_to_str(bitwise_or(access)), "-"
+FROM all_smack_binary_rules
+WHERE is_volatile = 0
+GROUP BY subject, object
+ORDER BY subject, object ASC;
+COMMIT TRANSACTION;