allow hal_graphics_composer_default vndbinder_device:chr_file { read write open ioctl }; allow hal_graphics_composer_default self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;; allow hal_graphics_composer_default sysfs_hdmi:file rw_file_perms; allow hal_graphics_composer_default sysfs_dmc:dir r_dir_perms; allow hal_graphics_composer_default sysfs_dmc:file rw_file_perms; allow hal_graphics_composer_default sysfs:file { read }; allow hal_graphics_composer_default sysfs_dev:file { read open }; allow hal_graphics_composer_default block_device:dir { search open }; allow hal_graphics_composer_default sysfs_devices_system_cpu:file rw_file_perms; # HWC_UeventThread allow hal_graphics_composer_default self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl; # vtunnel allow hal_graphics_composer_default video_device:chr_file rw_file_perms; allow hal_graphics_composer_default baseparameter_block_device:blk_file rw_file_perms; dontaudit hal_graphics_composer_default baseparameter_block_device:chr_file rw_file_perms; dontaudit hal_graphics_composer_default debugfs_sw_sync:dir r_dir_perms; allow hal_graphics_composer_default mediaserver:fd {use}; allow hal_graphics_composer_default zygote:fd use; allow hal_graphics_composer_default hal_camera_default:fd use; allow hal_graphics_composer_default vendor_data_file:dir { read open write getattr create add_name }; allow hal_graphics_composer_default vendor_data_file:file { read open write create getattr }; rw_rockchip_graphic_device(hal_graphics_composer_default) hal_client_domain(hal_graphics_composer_default, hal_graphics_allocator) vndbinder_use(hal_graphics_composer_default) get_prop(hal_graphics_composer_default, vendor_hwc_prop) set_prop(hal_graphics_composer_default, vendor_hwc_prop) get_prop(hal_graphics_composer_default, vendor_system_public_prop) set_prop(hal_graphics_composer_default, vendor_system_public_prop) get_prop(hal_graphics_composer_default, vendor_tv_input_prop) set_prop(hal_graphics_composer_default, vendor_tv_input_prop)