| type folio_daemon, domain, coredomain; |
| type folio_daemon_exec, system_file_type, exec_type, file_type; |
| |
| init_daemon_domain(folio_daemon) |
| |
| allow folio_daemon binder_device:chr_file rw_file_perms; |
| allow folio_daemon uhid_device:chr_file rw_file_perms; |
| |
| allow folio_daemon system_server:unix_stream_socket rw_socket_perms_no_ioctl; |
| |
| binder_use(folio_daemon) |
| binder_call(folio_daemon, system_server) |
| |
| allow folio_daemon sensorservice_service:service_manager find; |
| allow folio_daemon permission_service:service_manager find; |