| type chre, domain; | |
| type chre_exec, exec_type, vendor_file_type, file_type; | |
| init_daemon_domain(chre) | |
| allow chre ion_device:chr_file r_file_perms; | |
| allow chre qdsp_device:chr_file r_file_perms; | |
| # Allow CHRE to obtain wakelock | |
| wakelock_use(chre) | |
| # Allow CHRE to obtain audio | |
| hal_client_domain(chre, hal_audio) |