xref: /aosp_15_r20/system/sepolicy/vendor/hal_evs_default.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1# evs_mock mock hardware driver service
2type hal_evs_default, domain;
3hal_server_domain(hal_evs_default, hal_evs)
4
5# allow init to launch processes in this context
6type hal_evs_default_exec, exec_type, vendor_file_type, file_type;
7init_daemon_domain(hal_evs_default)
8
9# allow to use a graphic buffer
10hal_client_domain(hal_evs_default, hal_configstore)
11hal_client_domain(hal_evs_default, hal_graphics_allocator)
12hal_client_domain(hal_evs_default, hal_graphics_composer)
13
14# allow to use automotive display service
15binder_call(hal_evs_default, automotive_display_service_server)
16allow hal_evs_default fwk_automotive_display_hwservice:hwservice_manager find;
17allow hal_evs_default fwk_automotive_display_service:service_manager find;
18
19# allow to use hidl token service to retrieve HGBP object
20allow hal_evs_default hidl_token_hwservice:hwservice_manager find;
21
22# allow to access data from surfaceflinger
23allow hal_evs_default surfaceflinger:fd use;
24
25# allow to access EGL
26allow hal_evs_default gpu_device:chr_file rw_file_perms;
27allow hal_evs_default gpu_device:dir search;
28
29# allow to monitor uevents and access video devices
30allow hal_evs_default device:dir r_dir_perms;
31allow hal_evs_default video_device:chr_file rw_file_perms;
32
33# allow to access graphics related properties
34get_prop(hal_evs_default, graphics_config_prop);
35get_prop(hal_evs_default, graphics_config_writable_prop)
36
37# allow to use binder IPC.
38binder_use(hal_evs_default)
39