1; THIS IS A WORKAROUND for the current limitations of the module policy language 2; This should be used sparingly until we figure out a saner way to achieve the 3; stuff below, for example, by improving typeattribute statement of module 4; language. 5; 6; NOTE: This file has no effect on recovery policy. 7 8; Apps, except isolated apps, are clients of Allocator HAL 9; Unfortunately, we can't currently express this in module policy language: 10; typeattribute { appdomain -isolated_app } hal_allocator_client; 11; typeattribute hal_allocator_client halclientdomain; 12(typeattributeset hal_allocator_client ((and (appdomain) ((not (isolated_app)))))) 13(typeattributeset halclientdomain (hal_allocator_client)) 14 15; Apps, except isolated apps, are clients of Configstore HAL 16; Unfortunately, we can't currently express this in module policy language: 17; typeattribute { appdomain -isolated_app } hal_configstore_client; 18(typeattributeset hal_configstore_client ((and (appdomain) ((not (isolated_app)))))) 19 20; Apps, except isolated apps, are clients of Graphics Allocator HAL 21; Unfortunately, we can't currently express this in module policy language: 22; typeattribute { appdomain -isolated_app } hal_graphics_allocator_client; 23(typeattributeset hal_graphics_allocator_client ((and (appdomain) ((not (isolated_app)))))) 24 25; Domains hosting Camera HAL implementations are clients of Allocator HAL 26; Unfortunately, we can't currently express this in module policy language: 27; typeattribute hal_camera hal_allocator_client; 28(typeattributeset hal_allocator_client (hal_camera)) 29