# Rules for audio service. type hiavplayer, domain; type hiavplayer_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(hiavplayer) vndbinder_use(hiavplayer) binder_call(hiavplayer, vndservicemanager) allow hiavplayer hiavplayer_service:service_manager { add }; allow hiavplayer hal_audio_default:binder { transfer call }; allow hiavplayer hal_audio_default:fd { use }; allow hiavplayer hi_sys_device:chr_file { read write open ioctl }; allow hiavplayer hi_vfmw_device:chr_file { open read write ioctl getattr}; allow hiavplayer hi_userproc_device:chr_file { read write open ioctl }; allow hiavplayer hi_log_device:chr_file { read write open getattr ioctl }; allow hiavplayer hi_mem_device:chr_file { read write open ioctl }; allow hiavplayer hi_module_device:chr_file { read write open ioctl }; allow hiavplayer hi_stat_device:chr_file { read write open ioctl }; allow hiavplayer hi_userproc_device:chr_file { read write open ioctl }; allow hiavplayer hi_vdec_device:chr_file { read write open ioctl }; allow hiavplayer hi_sync_device:chr_file { read write open ioctl }; allow hiavplayer hi_ao_device:chr_file { read write open ioctl }; allow hiavplayer hi_vo_device:chr_file { read write open ioctl }; allow hiavplayer mmz_userdev_device:chr_file { read write open ioctl }; allow hiavplayer hi_adec_device:chr_file { read write open ioctl }; allow hiavplayer mediacodec:binder { call }; # neverallow # binder_in_vendor_violators, vendor_executes_system_violators;