1binder_call(hal_keymint_client, hal_keymint_server) 2 3hal_attribute_service(hal_keymint, hal_keymint_service) 4hal_attribute_service(hal_keymint, hal_remotelyprovisionedcomponent_service) 5binder_call(hal_keymint_server, servicemanager) 6 7allow { hal_keymint_server -coredomain } tee_device:chr_file rw_file_perms; 8allow { hal_keymint_server -coredomain } ion_device:chr_file r_file_perms; 9