xref: /aosp_15_r20/system/sepolicy/private/evsmanagerd.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1# evsmanager
2typeattribute evsmanagerd coredomain;
3typeattribute evsmanagerd evsmanager_service_server;
4
5type evsmanagerd_exec, system_file_type, exec_type, file_type;
6
7init_daemon_domain(evsmanagerd);
8
9# Declares as a binder service
10binder_service(evsmanagerd)
11
12# Allows to add a service to service_manager
13add_service(evsmanagerd, evsmanagerd_service)
14
15# Allows to use the binder IPC
16binder_use(evsmanagerd)
17
18# Allows binder IPCs to the various system services
19binder_call(evsmanagerd, system_server)
20
21# Allows to use EVS HAL implementations
22hal_client_domain(evsmanagerd, hal_evs)
23
24# Allows to write messages to the shell
25allow evsmanagerd shell:fd use;
26allow evsmanagerd shell:fifo_file write;
27
28# Allows to use the graphics allocator
29allow evsmanagerd hal_graphics_allocator:fd use;
30
31# Allows to use a bootstrap statsd
32allow evsmanagerd statsbootstrap_service:service_manager find;
33
34# Allows binder IPCs to the CarService
35binder_call(evsmanagerd, appdomain)
36
37# For HIDL evs manager implementation
38allow evsmanagerd hal_evs_hwservice:hwservice_manager add;
39allow evsmanagerd hidl_base_hwservice:hwservice_manager add;
40