car_product/sepolicy/vms.te

# Vehicle monitor service
type vms, domain;
type vms_exec, exec_type, file_type;

allow vms system_app:binder { call };
allow vms car_service:service_manager { add };
allow vms priv_app:binder { call };

init_daemon_domain(vms)

binder_use(vms);