1type hal_keymint_remote, domain; 2hal_server_domain(hal_keymint_remote, hal_keymint) 3 4type hal_keymint_remote_exec, exec_type, vendor_file_type, file_type; 5init_daemon_domain(hal_keymint_remote) 6 7allow hal_keymint_remote device:dir r_dir_perms; 8allow hal_keymint_remote keymaster_device:chr_file rw_file_perms; 9 10# Write to kernel log (/dev/kmsg) 11allow hal_keymint_remote kmsg_device:chr_file w_file_perms; 12allow hal_keymint_remote kmsg_device:chr_file getattr; 13