sepolicy/private/hal_light_msmnile.te

type hal_light_msmnile, coredomain, domain;

# Allow a base set of permissions required for a domain to offer a
# HAL implementation of the specified type over HwBinder.
typeattribute hal_light_msmnile halclientdomain;
typeattribute hal_light_msmnile hal_light_client;

# HwBinder IPC from client to server, and callbacks
binder_call(hal_light_client, hal_light_server)
binder_call(hal_light_server, hal_light_client)

add_hwservice(hal_light_server, hal_light_hwservice)
allow hal_light_client hal_light_hwservice:hwservice_manager find;

type hal_light_msmnile_exec, exec_type, file_type;
init_daemon_domain(hal_light_msmnile)

allow hal_light_msmnile { sysfs_graphics sysfs_rg_led }:lnk_file read;
allow hal_light_msmnile { sysfs_graphics sysfs_rg_led }:file rw_file_perms;
allow hal_light_msmnile { sysfs_graphics sysfs_leds sysfs_rg_led }:dir r_dir_perms;