Pavel Maltsev | 3af9b32 | 2018-05-07 12:38:10 -0700 | [diff] [blame^] | 1 | # Domain to run EmbeddedKitchenSink app (for test-purpose) |
| 2 | type kitchensink_app, domain; |
| 3 | app_domain(kitchensink_app); |
| 4 | |
| 5 | # Allow Car Service to be the client of Vehicle HAL |
| 6 | hal_client_domain(kitchensink_app, hal_vehicle) |
| 7 | |
| 8 | # Keep alphabetically sorted. |
| 9 | allow kitchensink_app { |
| 10 | accessibility_service |
| 11 | activity_service |
| 12 | autofill_service |
| 13 | connectivity_service |
| 14 | content_service |
| 15 | deviceidle_service |
| 16 | display_service |
| 17 | graphicsstats_service |
| 18 | input_method_service |
| 19 | input_service |
| 20 | location_service |
| 21 | network_management_service |
| 22 | power_service |
| 23 | sensorservice_service |
| 24 | surfaceflinger_service |
| 25 | uimode_service |
| 26 | }:service_manager find; |
| 27 | |
| 28 | # Read and write /data/data subdirectory. |
| 29 | allow kitchensink_app system_app_data_file:dir { create_dir_perms getattr }; |
| 30 | allow kitchensink_app system_app_data_file:{ file lnk_file } create_file_perms; |