| typeattribute lmkd coredomain; | |
| init_daemon_domain(lmkd) | |
| # Set sys.lmk.* properties. | |
| set_prop(lmkd, system_lmk_prop) | |
| # Set lmkd.* properties. | |
| set_prop(lmkd, lmkd_prop) | |
| allow lmkd fs_bpf:dir search; | |
| allow lmkd fs_bpf:file read; | |
| allow lmkd bpfloader:bpf map_read; | |
| neverallow { domain -init -lmkd -vendor_init } lmkd_prop:property_service set; |