sepolicy/common/hal_graphics_composer_default.te

#============= hal_graphics_composer_default ==============
hal_client_domain(hal_graphics_composer_default, hal_graphics_allocator);

allow hal_graphics_composer_default vndbinder_device:chr_file { ioctl open read write map };
allow hal_graphics_composer_default graphics_device:chr_file { ioctl open read write map };
allow hal_graphics_composer_default gpu_device:chr_file { ioctl open read write map };
allow hal_graphics_composer_default self:vsock_socket create_socket_perms_no_ioctl;
allow hal_graphics_composer_default hal_graphics_allocator_default:vsock_socket { read write getattr };
allow hal_graphics_composer_default self:netlink_kobject_uevent_socket { create bind read };