| type hal_widevine_system, domain, coredomain; | |
| hal_server_domain(hal_widevine_system, hal_drm) | |
| type hal_widevine_system_exec, exec_type, system_file_type, file_type; | |
| init_daemon_domain(hal_widevine_system) | |
| allow hal_widevine_system self:vsock_socket { create_socket_perms_no_ioctl }; |