allow hal_graphics_composer_server hal_graphics_allocator_default_tmpfs:file read; allow hal_graphics_composer_server self:{ socket vsock_socket } create_socket_perms_no_ioctl; get_prop(hal_graphics_composer_server, vendor_hwcomposer_prop) # Persistent memory for some hwcomposer configuration. type hal_graphics_composer_pmem_device, dev_type; allow hal_graphics_composer_server hal_graphics_composer_pmem_device:blk_file rw_file_perms; allow hal_graphics_composer_server block_device:dir search;