1hal_client_domain(system_app, hal_vehicle) 2allow system_app { proc_vmallocinfo proc_pagetypeinfo }:file r_file_perms; 3