1type feature_enabler_client, domain; 2type feature_enabler_client_exec, exec_type, vendor_file_type, file_type; 3 4init_daemon_domain(feature_enabler_client) 5vndbinder_use(feature_enabler_client); 6allow feature_enabler_client ion_device:chr_file r_file_perms; 7allow feature_enabler_client smcinvoke_device:chr_file rw_file_perms; 8allow feature_enabler_client graphics_device:chr_file rw_file_perms; 9allow feature_enabler_client tee_device:chr_file rw_file_perms; 10 11allow feature_enabler_client mnt_vendor_file:dir search; 12allow feature_enabler_client persist_drm_file:dir r_dir_perms; 13allow feature_enabler_client persist_file:dir search; 14r_dir_file(feature_enabler_client, persist_display_file); 15 16hwbinder_use(feature_enabler_client); 17 18binder_call(feature_enabler_client, hal_graphics_composer) 19allow feature_enabler_client qdisplay_service:service_manager find; 20add_service(feature_enabler_client, qfeatenab_client_service) 21unix_socket_connect(feature_enabler_client, ssgtzd, ssgtzd) 22