1binder_call(hal_nlinterceptor_client, hal_nlinterceptor_server) 2 3hal_attribute_service(hal_nlinterceptor, hal_nlinterceptor_service) 4binder_call(hal_nlinterceptor, servicemanager) 5 6allow hal_nlinterceptor self:global_capability_class_set net_admin; 7allow hal_nlinterceptor self:netlink_generic_socket create_socket_perms_no_ioctl; 8allow hal_nlinterceptor self:netlink_route_socket { create_socket_perms_no_ioctl nlmsg_readpriv nlmsg_write }; 9