1 type easelservice_app, domain; 2 3 app_domain(easelservice_app) 4 5 allow easelservice_app app_api_service:service_manager find; 6 allow easelservice_app surfaceflinger_service:service_manager find; 7 # Access to mnh_sm driver 8 allow easelservice_app easel_device:chr_file { read write ioctl open }; 9 # Access to libeaselmanager_client.so 10 allow easelservice_app hal_paintbox_hwservice:hwservice_manager find; 11 binder_call(easelservice_app, easel) 12