| Nick Bray | 084faf0 | 2017-02-09 15:15:11 -0800 | [diff] [blame] | 1 | # sensord |
| 2 | type sensord, domain, mlstrustedsubject; |
| 3 | type sensord_exec, exec_type, file_type; |
| 4 | |
| Steven Moreland | d3ce5dc | 2017-03-22 09:16:49 -0700 | [diff] [blame] | 5 | hal_client_domain(sensord, hal_graphics_allocator) |
| 6 | allow sensord hal_graphics_allocator:fd use; |
| 7 | |
| Alex Vakulenko | 41daa7f | 2017-05-01 13:01:44 -0700 | [diff] [blame] | 8 | pdx_server(sensord, sensors_client) |
| 9 | pdx_server(sensord, pose_client) |
| 10 | pdx_client(sensord, bufferhub_client) |
| 11 | pdx_client(sensord, performance_client) |
| Nick Bray | 084faf0 | 2017-02-09 15:15:11 -0800 | [diff] [blame] | 12 | |
| 13 | # Access /dev/ion |
| 14 | allow sensord ion_device:chr_file r_file_perms; |
| 15 | |
| 16 | allow sensord sensors_device:chr_file rw_file_perms; |
| 17 | |
| 18 | binder_use(sensord) |
| 19 | binder_call(sensord, system_server) |
| 20 | allow sensord system_server:unix_stream_socket { read write }; |
| 21 | |
| 22 | allow sensord sensorservice_service:service_manager find; |
| 23 | # permission_service is used by the NDK sensor APIs. |
| 24 | allow sensord permission_service:service_manager find; |