basic/non_plat/mtk_hal_mmagent.te

# ==============================================
# Policy File of /vendor/bin/hw/vendor.mediatek.hardware.mmagent@1.0-service Executable File

# ==============================================
# Type Declaration
# ==============================================

type mtk_hal_mmagent, domain;
type mtk_hal_mmagent_exec, exec_type, file_type, vendor_file_type;

# ==============================================
# Common SEPolicy Rule
# ==============================================

# Setup for domain transition
init_daemon_domain(mtk_hal_mmagent)

# Allow a set of permissions required for a domain to be a server which provides a HAL implementation over HWBinder.
hal_server_domain(mtk_hal_mmagent, hal_mtk_mmagent)

# Purpose : Allow to use kernel driver
allow mtk_hal_mmagent ion_device:chr_file rw_file_perms;

# Purpose : Allow to set property for AI function
allow mtk_hal_mmagent apusys_device:chr_file rw_file_perms;

# Purpose : Allow use gralloc buffer
allow mtk_hal_mmagent hal_graphics_allocator_default:fd use;