1typeattribute lmkd coredomain; 2typeattribute lmkd bpfdomain; 3 4init_daemon_domain(lmkd) 5 6# Set sys.lmk.* properties. 7set_prop(lmkd, system_lmk_prop) 8 9# Set lmkd.* properties. 10set_prop(lmkd, lmkd_prop) 11 12# Get persist.device_config.lmk_native.* properties. 13get_prop(lmkd, device_config_lmkd_native_prop) 14 15allow lmkd fs_bpf:file read; 16allow lmkd bpfloader:bpf map_read; 17 18neverallow { domain -init -lmkd -vendor_init } lmkd_prop:property_service set; 19