| type cuttlefish_sensor_injection, domain; |
| type cuttlefish_sensor_injection_exec, exec_type, vendor_file_type, file_type; |
| |
| # Switch to cuttlefish_sensor_injection domain when executing from shell. |
| domain_auto_trans(shell, cuttlefish_sensor_injection_exec, cuttlefish_sensor_injection) |
| allow cuttlefish_sensor_injection shell:fd use; |
| |
| # Allow cuttlefish_sensor_injection to communicate over adb connection. |
| allow cuttlefish_sensor_injection adbd:fd use; |
| allow cuttlefish_sensor_injection adbd:unix_stream_socket { read write }; |
| # Needed to run the binary directly via adb socket. |
| allow cuttlefish_sensor_injection devpts:chr_file { read write }; |
| |
| # Grant cuttlefish_sensor_injection access to the ISensors HAL. |
| hal_client_domain(cuttlefish_sensor_injection, hal_sensors) |
| binder_use(cuttlefish_sensor_injection) |
