1type hal_keymint_rust, domain; 2hal_server_domain(hal_keymint_rust, hal_keymint) 3 4type hal_keymint_rust_exec, exec_type, vendor_file_type, file_type; 5init_daemon_domain(hal_keymint_rust) 6 7type keymint_device, dev_type; 8 9allow hal_keymint_rust device:dir r_dir_perms; 10allow hal_keymint_rust keymint_device:chr_file rw_file_perms; 11 12# Write to kernel log (/dev/kmsg) 13allow hal_keymint_rust kmsg_device:chr_file w_file_perms; 14allow hal_keymint_rust kmsg_device:chr_file getattr; 15 16get_prop(hal_keymint_rust, vendor_security_patch_level_prop) 17get_prop(hal_keymint_rust, vendor_boot_security_patch_level_prop) 18get_prop(hal_keymint_rust, serialno_prop) 19