# automotive watchdog support | |
allow system_server hal_vehicle_server:process sigkill; | |
carwatchdog_client_domain(hal_vehicle_default) | |
binder_use(hal_vehicle_default) | |
# communication between vehicle client/server via VSOCK | |
allow hal_vehicle_default self:vsock_socket { create_socket_perms_no_ioctl listen accept }; |