basic/non_plat/mtk_hal_keymanage.te

# ==============================================
# Common SEPolicy Rule
# ==============================================

# Set a new domain
type mtk_hal_keymanage, domain;

# Set exec file type
type mtk_hal_keymanage_exec, exec_type, file_type, vendor_file_type;

# Setup for domain transition
init_daemon_domain(mtk_hal_keymanage)

# Set mtk_hal_keymanage as server domain of hal_keymaster
hal_server_domain(mtk_hal_keymanage, hal_keymaster)

# Give permission for hal_key_manage to access kisd service
allow mtk_hal_keymanage kisd:unix_stream_socket connectto;

# Allow mtk_hal_keyinstall to access /data/key_provisioning
allow mtk_hal_keymanage key_install_data_file:dir w_dir_perms;
allow mtk_hal_keymanage key_install_data_file:file create_file_perms;