1type easelservice_app, domain; 2 3app_domain(easelservice_app) 4 5allow easelservice_app app_api_service:service_manager find; 6allow easelservice_app surfaceflinger_service:service_manager find; 7# Access to mnh_sm driver 8allow easelservice_app easel_device:chr_file { read write ioctl open }; 9# Access to keychain for kernel based authentication 10allow easelservice_app kernel:key search;