1# bootanimation oneshot service 2type bootanim, domain; 3type bootanim_exec, exec_type, file_type; 4 5hal_client_domain(bootanim, hal_configstore) 6hal_client_domain(bootanim, hal_graphics_allocator) 7hal_client_domain(bootanim, hal_graphics_composer) 8 9binder_use(bootanim) 10binder_call(bootanim, surfaceflinger) 11binder_call(bootanim, audioserver) 12 13hwbinder_use(bootanim) 14 15allow bootanim gpu_device:chr_file rw_file_perms; 16 17# /oem access 18allow bootanim oemfs:dir search; 19allow bootanim oemfs:file r_file_perms; 20 21allow bootanim audio_device:dir r_dir_perms; 22allow bootanim audio_device:chr_file rw_file_perms; 23 24allow bootanim audioserver_service:service_manager find; 25allow bootanim surfaceflinger_service:service_manager find; 26 27# Allow access to ion memory allocation device 28allow bootanim ion_device:chr_file rw_file_perms; 29allow bootanim hal_graphics_allocator:fd use; 30 31# Fences 32allow bootanim hal_graphics_composer:fd use; 33 34# Read access to pseudo filesystems. 35r_dir_file(bootanim, proc) 36allow bootanim proc_meminfo:file r_file_perms; 37r_dir_file(bootanim, sysfs) 38r_dir_file(bootanim, cgroup) 39 40# System file accesses. 41allow bootanim system_file:dir r_dir_perms; 42