type hal_mlipay_hwservice, hwservice_manager_type; type hal_mlipay_default, domain; hal_server_domain(hal_mlipay_default, hal_mlipay) type hal_mlipay_default_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(hal_mlipay_default) # Allow hwbinder call from hal client to server binder_call(hal_mlipay_client, hal_mlipay_server) # Add hwservice related rules add_hwservice(hal_mlipay_server, hal_mlipay_hwservice) allow hal_mlipay_client hal_mlipay_hwservice:hwservice_manager find; allow hal_mlipay_default tee_device:chr_file rw_file_perms; allow hal_mlipay_default ion_device:chr_file r_file_perms; r_dir_file(hal_mlipay_default, firmware_file) set_prop(hal_mlipay_default, vendor_mlipay_prop); get_prop(hal_mlipay_default, vendor_fp_prop)