| type sensorservice, domain; |
| type sensorservice_exec, exec_type, file_type; |
| |
| brillo_domain(sensorservice) |
| |
| # Allow sensorservice to be discovered by servicemanager and use binder. |
| allow sensorservice sensorservice_service:service_manager add; |
| allow sensorservice servicemanager:binder { transfer call }; |
| |
| # Allow crash_reporter access to core dump files. |
| allow_crash_reporter(sensorservice) |
| |
| r_dir_file(sensorservice, proc_net) |
| r_dir_file(sensorservice, sysfs) |
| |
| allow sensorservice input_device:chr_file r_file_perms; |
| allow sensorservice input_device:dir search; |
| |
| allow sensorservice self:capability { net_admin sys_nice }; |
