1# easel service 2type easel, domain; 3type easel_exec, exec_type, vendor_file_type, file_type; 4 5init_daemon_domain(easel) 6 7hwbinder_use(easel) 8add_hwservice(easel, hal_paintbox_hwservice) 9get_prop(easel, hwservicemanager_prop) 10 11# access easel dev nodes 12allow easel easel_device:chr_file rw_file_perms; 13allow easel sysfs_easel:file rw_file_perms; 14allow easel sysfs_easel:dir r_dir_perms; 15 16# access easel thermal sysfs 17allow easel sysfs_thermal:dir r_dir_perms; 18allow easel sysfs_thermal:file r_file_perms; 19allow easel sysfs_thermal:lnk_file r_file_perms; 20 21# access "/proc/stat" 22allow easel proc_stat:file r_file_perms; 23 24allow easel google_camera_app:binder call; 25allow easel hal_camera_default:binder call; 26allow easel hal_neuralnetworks_paintbox:binder call; 27 28allow easel hal_graphics_allocator_default:fd use; 29allow easel ion_device:chr_file r_file_perms; 30 31# access to keychain for kernel based authentication 32allow easel kernel:key search;