1# bootanimation oneshot service 2type bootanim, domain; 3type bootanim_exec, exec_type, file_type; 4 5hal_client_domain(bootanim, hal_graphics_allocator) 6hal_client_domain(bootanim, hal_graphics_composer) 7 8binder_use(bootanim) 9binder_call(bootanim, surfaceflinger) 10binder_call(bootanim, audioserver) 11 12hwbinder_use(bootanim) 13 14allow bootanim gpu_device:chr_file rw_file_perms; 15 16# /oem access 17allow bootanim oemfs:dir search; 18allow bootanim oemfs:file r_file_perms; 19 20allow bootanim audio_device:dir r_dir_perms; 21allow bootanim audio_device:chr_file rw_file_perms; 22 23allow bootanim audioserver_service:service_manager find; 24allow bootanim surfaceflinger_service:service_manager find; 25 26# Allow access to ion memory allocation device 27allow bootanim ion_device:chr_file rw_file_perms; 28allow bootanim hal_graphics_allocator:fd use; 29 30# Fences 31allow bootanim hal_graphics_composer:fd use; 32 33# Read access to pseudo filesystems. 34r_dir_file(bootanim, proc) 35allow bootanim proc_meminfo:file r_file_perms; 36r_dir_file(bootanim, sysfs) 37r_dir_file(bootanim, cgroup) 38 39# System file accesses. 40allow bootanim system_file:dir r_dir_perms; 41