| typeattribute lmkd coredomain; | |
| typeattribute lmkd bpfdomain; | |
| init_daemon_domain(lmkd) | |
| # Set sys.lmk.* properties. | |
| set_prop(lmkd, system_lmk_prop) | |
| # Set lmkd.* properties. | |
| set_prop(lmkd, lmkd_prop) | |
| # Get persist.device_config.lmk_native.* properties. | |
| get_prop(lmkd, device_config_lmkd_native_prop) | |
| allow lmkd fs_bpf:file read; | |
| allow lmkd bpfloader:bpf map_read; | |
| neverallow { domain -init -lmkd -vendor_init } lmkd_prop:property_service set; |