1type hal_keymaster_remote, domain; 2hal_server_domain(hal_keymaster_remote, hal_keymaster) 3 4type hal_keymaster_remote_exec, exec_type, vendor_file_type, file_type; 5init_daemon_domain(hal_keymaster_remote) 6 7type keymaster_device, dev_type; 8 9allow hal_keymaster_remote device:dir r_dir_perms; 10allow hal_keymaster_remote keymaster_device:chr_file rw_file_perms; 11 12# Write to kernel log (/dev/kmsg) 13allow hal_keymaster_remote kmsg_device:chr_file w_file_perms; 14allow hal_keymaster_remote kmsg_device:chr_file getattr; 15