Access Protection subrules are conditions that are specified for a rule. Subrules are rules where you can specify the operation and target.
A rule must have at least one sub rule. You can create only one subrule while creating a rule. To add more subrules to a rule, you can use --editaprule. Subrule types can be set as file or process. Depending on the subrule type, you can specify the operations for the subrule.