type hal_wifi_ext, domain;
hal_server_domain(hal_wifi_ext, hal_wifi)

type hal_wifi_ext_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_wifi_ext)

# Allow to start the IWifi:wifi_ext service
add_hwservice(hal_wifi_ext, hal_wifi_ext_hwservice);

# Allow wifi hal access to LOWI
allow hal_wifi_ext location:unix_stream_socket connectto;
allow hal_wifi_ext location:unix_dgram_socket sendto;
allow hal_wifi_ext wifihal_socket:dir rw_dir_perms;
allow hal_wifi_ext wifihal_socket:sock_file create_file_perms;

# write to files owned by location daemon
allow hal_wifi_ext location_socket:dir search;
allow hal_wifi_ext location_socket:sock_file write;

# Write wlan driver/fw version into property
set_prop(hal_wifi_ext, vendor_wifi_version)

# allow hal_wifi to write into /proc/debugdriver/driverdump
r_dir_file(hal_wifi_ext, proc_wifi_dbg)

# Allow wifi_ext to report callbacks to gril-service app
binder_call(hal_wifi_ext, grilservice_app)

# Allow hal_wifi to write into /dev/wlan
allow hal_wifi_ext wlan_device:chr_file rw_file_perms;

# Allow wifi_ext to read and write /data/vendor/firmware/wifi
allow hal_wifi_ext updated_wifi_firmware_data_file:dir rw_dir_perms;
allow hal_wifi_ext updated_wifi_firmware_data_file:file create_file_perms;

# Allow wifi_ext to read the updated firmware files from app
allow hal_wifi_ext priv_app:fd use;
allow hal_wifi_ext privapp_data_file:file { read map };

userdebug_or_eng(`
# debugfs entries are only needed in user-debug or eng builds

# Allow wifi hal to access wlan debugfs directories
allow hal_wifi_ext debugfs_wlan:dir r_dir_perms;
')