| type easelservice_app, domain; | |
| app_domain(easelservice_app) | |
| allow easelservice_app app_api_service:service_manager find; | |
| allow easelservice_app surfaceflinger_service:service_manager find; | |
| # Access to mnh_sm driver | |
| allow easelservice_app easel_device:chr_file { read write ioctl open }; | |
| # Access to libeaselmanager_client.so | |
| allow easelservice_app hal_paintbox_hwservice:hwservice_manager find; | |
| binder_call(easelservice_app, easel) |