sepolicy/hal_gnss.te

#access to /sys/devices/soc0/hw_platform and /sys/devices/soc0/soc_id
allow hal_gnss sysfs:file { read open getattr };

allow hal_gnss self:socket { create read write ioctl } ;
allowxperm hal_gnss self:socket ioctl { IPC_ROUTER_IOCTL_BIND_CONTROL_PORT
                                        IPC_ROUTER_IOCTL_LOOKUP_SERVER } ;
allow hal_gnss self:netlink_socket { create bind read };

allow hal_gnss sysfs_msm_subsys:dir { search read open };
allow hal_gnss sysfs_msm_subsys:lnk_file read;