1 ; THIS IS A WORKAROUND for the current limitations of the module policy language 2 ; This should be used sparingly until we figure out a saner way to achieve the 3 ; stuff below, for example, by improving typeattribute statement of module 4 ; language. 5 ; 6 ; NOTE: This file has no effect on recovery policy. 7 8 ; Apps, except isolated apps, are clients of Allocator HAL 9 ; Unfortunately, we can't currently express this in module policy language: 10 ; typeattribute { appdomain -isolated_app } hal_allocator_client; 11 ; typeattribute hal_allocator_client halclientdomain; 12 (typeattributeset hal_allocator_client ((and (appdomain) ((not (isolated_app)))))) 13 (typeattributeset halclientdomain (hal_allocator_client)) 14 15 ; Apps, except isolated apps, are clients of Configstore HAL 16 ; Unfortunately, we can't currently express this in module policy language: 17 ; typeattribute { appdomain -isolated_app } hal_configstore_client; 18 (typeattributeset hal_configstore_client ((and (appdomain) ((not (isolated_app)))))) 19 20 ; Apps, except isolated apps, are clients of Graphics Allocator HAL 21 ; Unfortunately, we can't currently express this in module policy language: 22 ; typeattribute { appdomain -isolated_app } hal_graphics_allocator_client; 23 (typeattributeset hal_graphics_allocator_client ((and (appdomain) ((not (isolated_app)))))) 24 25 ; Apps, except isolated apps, are clients of Cas HAL 26 ; Unfortunately, we can't currently express this in module policy language: 27 ; typeattribute { appdomain -isolated_app } hal_cas_client; 28 (typeattributeset hal_cas_client ((and (appdomain) ((not (isolated_app)))))) 29 30 ; Domains hosting Camera HAL implementations are clients of Allocator HAL 31 ; Unfortunately, we can't currently express this in module policy language: 32 ; typeattribute hal_camera hal_allocator_client; 33 (typeattributeset hal_allocator_client (hal_camera)) 34 35 ; Apps, except isolated apps, are clients of Neuralnetworks HAL 36 ; Unfortunately, we can't currently express this in module policy language: 37 ; typeattribute { appdomain -isolated_app } hal_neuralnetworks_client; 38 (typeattributeset hal_neuralnetworks_client ((and (appdomain) ((not (isolated_app)))))) 39
