| # sensord |
| type sensord, domain, mlstrustedsubject; |
| type sensord_exec, exec_type, file_type; |
| |
| hal_client_domain(sensord, hal_graphics_allocator) |
| allow sensord hal_graphics_allocator:fd use; |
| |
| pdx_server(sensord, sensors_client) |
| pdx_server(sensord, pose_client) |
| pdx_client(sensord, bufferhub_client) |
| pdx_client(sensord, performance_client) |
| |
| # Access /dev/ion |
| allow sensord ion_device:chr_file r_file_perms; |
| |
| allow sensord sensors_device:chr_file rw_file_perms; |
| |
| binder_use(sensord) |
| binder_call(sensord, system_server) |
| allow sensord system_server:unix_stream_socket { read write }; |
| |
| allow sensord sensorservice_service:service_manager find; |
| # permission_service is used by the NDK sensor APIs. |
| allow sensord permission_service:service_manager find; |
