common/mmi.te

#integrated process
type mmi, domain;
type mmi_exec, exec_type, file_type;

#started by init
init_daemon_domain(mmi)

#self capability
allow mmi self:capability { sys_nice dac_override };
allow mmi self:capability2 block_suspend;

#For various devices
allow mmi graphics_device:chr_file rw_file_perms;
allow mmi input_device:chr_file r_file_perms;
allow mmi input_device:dir r_file_perms;
allow mmi nfc_device:chr_file rw_file_perms;
allow mmi shell_exec:file rx_file_perms;
allow mmi sysfs_wake_lock:file rw_file_perms;

#FTM_AP folder permissions
allow mmi mmi_data_file:dir rw_dir_perms;
allow mmi mmi_data_file:file rw_file_perms;

#socket
unix_socket_connect(mmi, property, init)

#allow mmi set system prop
allow mmi powerctl_prop:property_service set;

#allow mmi operation on MISC partition
allow mmi misc_partition:blk_file w_file_perms;