sepolicy/vendor/google/hal_audiocontrol_impl.te

type hal_audiocontrol_impl, domain;
type hal_audiocontrol_impl_exec, exec_type, vendor_file_type, file_type;
type hal_audiocontrol_prop, property_type;

hal_server_domain(hal_audiocontrol_impl, hal_audiocontrol)

init_daemon_domain(hal_audiocontrol_impl)

set_prop(hal_audiocontrol_impl, hal_audiocontrol_prop)

carwatchdog_client_domain(hal_audiocontrol_impl)
binder_use(hal_audiocontrol_impl)

allow system_server hal_audiocontrol_server:process sigkill;

allow hal_audiocontrol_impl self:vsock_socket { create_socket_perms_no_ioctl listen accept };

# TODO(b/130668487): Label the vsock sockets.
allow hal_audiocontrol_impl unlabeled:vsock_socket { read shutdown write };

allow hal_audiocontrol_impl proc_net:file { getattr open read };