1 # Domain to run EmbeddedKitchenSink app (for test-purpose) 2 type kitchensink_app, domain; 3 app_domain(kitchensink_app); 4 5 # Allow Car Service to be the client of Vehicle HAL 6 hal_client_domain(kitchensink_app, hal_vehicle) 7 8 # Keep alphabetically sorted. 9 allow kitchensink_app { 10 accessibility_service 11 activity_service 12 autofill_service 13 connectivity_service 14 content_service 15 deviceidle_service 16 display_service 17 graphicsstats_service 18 input_method_service 19 input_service 20 location_service 21 network_management_service 22 power_service 23 sensorservice_service 24 surfaceflinger_service 25 uimode_service 26 }:service_manager find; 27 28 # Read and write /data/data subdirectory. 29 allow kitchensink_app system_app_data_file:dir { create_dir_perms getattr }; 30 allow kitchensink_app system_app_data_file:{ file lnk_file } create_file_perms; 31