1type hal_gatekeeper_remote, domain; 2hal_server_domain(hal_gatekeeper_remote, hal_gatekeeper) 3 4type hal_gatekeeper_remote_exec, exec_type, vendor_file_type, file_type; 5init_daemon_domain(hal_gatekeeper_remote) 6 7type gatekeeper_device, file_type; 8 9allow hal_gatekeeper_remote device:dir r_dir_perms; 10allow hal_gatekeeper_remote gatekeeper_device:chr_file rw_file_perms; 11 12# Write to kernel log (/dev/kmsg) 13allow hal_gatekeeper_remote kmsg_device:chr_file w_file_perms; 14allow hal_gatekeeper_remote kmsg_device:chr_file getattr; 15