blob: 098499a5223063875c817c32b4372cefbd6a47e7 [file] [log] [blame]
# evs app
type evs_app, domain, coredomain;
hal_client_domain(evs_app, hal_evs)
hal_client_domain(evs_app, hal_vehicle)
hal_client_domain(evs_app, hal_configstore)
hal_client_domain(evs_app, hal_graphics_allocator)
# allow init to launch processes in this context
type evs_app_exec, exec_type, file_type;
# gets access to its own files on disk
type evs_app_files, file_type;
allow evs_app evs_app_files:file { getattr open read };
allow evs_app evs_app_files:dir search;
# Allow use of gralloc buffers and EGL
allow evs_app gpu_device:chr_file rw_file_perms;
allow evs_app ion_device:chr_file r_file_perms;
allow evs_app system_file:dir r_dir_perms;