blob: 8bd5a68eec5faefd445e7991e670d057591a614a [file] [log] [blame]
Pavel Maltsev3af9b322018-05-07 12:38:10 -07001# Domain to run EmbeddedKitchenSink app (for test-purpose)
2type kitchensink_app, domain;
3app_domain(kitchensink_app);
4
5# Allow Car Service to be the client of Vehicle HAL
6hal_client_domain(kitchensink_app, hal_vehicle)
7
8# Keep alphabetically sorted.
9allow kitchensink_app {
10 accessibility_service
11 activity_service
12 autofill_service
13 connectivity_service
14 content_service
15 deviceidle_service
16 display_service
17 graphicsstats_service
18 input_method_service
19 input_service
20 location_service
21 network_management_service
22 power_service
23 sensorservice_service
24 surfaceflinger_service
25 uimode_service
26}:service_manager find;
27
28# Read and write /data/data subdirectory.
29allow kitchensink_app system_app_data_file:dir { create_dir_perms getattr };
30allow kitchensink_app system_app_data_file:{ file lnk_file } create_file_perms;