blob: 2d9ec8bcadb13a964d3e3e1b3ace6e55e9d4ec30 [file] [log] [blame]
Alex Klyubin7cda44f2017-03-21 14:28:53 -07001; THIS IS A WORKAROUND for the current limitations of the module policy language
2; This should be used sparingly until we figure out a saner way to achieve the
3; stuff below, for example, by improving typeattribute statement of module
4; language.
5;
6; NOTE: This file has no effect on recovery policy.
7
8; Apps, except isolated apps, are clients of Allocator HAL
9; Unfortunately, we can't currently express this in module policy language:
10; typeattribute { appdomain -isolated_app } hal_allocator_client;
11; typeattribute hal_allocator_client halclientdomain;
12(typeattributeset hal_allocator_client ((and (appdomain) ((not (isolated_app))))))
13(typeattributeset halclientdomain (hal_allocator_client))