1# Allow use of USB devices, gralloc buffers, and surface flinger
2hal_client_domain(hal_evs_default, hal_graphics_allocator);
3hal_client_domain(hal_evs_default, hal_graphics_composer)
4
5# Allow the driver to access EGL
6allow hal_evs_default gpu_device:chr_file rw_file_perms;
7allow hal_evs_default gpu_device:dir search;
8
9# Allow the driver to use SurfaceFlinger
10binder_call(hal_evs_default, surfaceflinger);
11allow hal_evs_default surfaceflinger_service:service_manager find;
12allow hal_evs_default ion_device:chr_file r_file_perms;
13
14# Allow the driver to use automotive display proxy service
15binder_call(hal_evs_default, automotive_display_service_server);
16allow hal_evs_default fwk_automotive_display_hwservice:hwservice_manager find;
17
18# TODO(b/289381868): Remove below line when a vendor process can initialize
19#                    EGL without violating selinux rules.
20dontaudit hal_evs_default system_prop:file read;
21
22# Allow to access graphics related properties
23get_prop(hal_evs_default, graphics_config_writable_prop)
24
25# allow to use binder IPC.
26binder_use(hal_evs_default)
27
28# Allow the driver to access vendor files
29allow hal_evs_default vendor_data_file:file r_file_perms;
30
31# Allow to access default property.
32# get_prop(hal_evs_default, default_prop) triggers neverallow checks.
33# Known issue (b/322843384).
34dontaudit hal_evs_default default_prop:file read;
35
36# Allow to access /dev/dma_heap/system
37allow hal_evs_default dmabuf_system_heap_device:chr_file r_file_perms;
38
39# Allow to use the media extractor.
40allow hal_evs_default mediaextractor_service:service_manager find;
41allow hal_evs_default mediaserver_service:service_manager find;
42binder_call(hal_evs_default, mediaextractor)
43binder_call(hal_evs_default, mediaserver)
44
45# Allow to use OMX service.
46hal_client_domain(hal_evs_default, hal_omx)
47hal_client_domain(hal_evs_default, hal_codec2)
48
49# Allow to interact with mediametrics
50allow hal_evs_default mediametrics_service:service_manager find;
51binder_call(hal_evs_default, mediametrics)
52