1 # HwBinder IPC from client to server, and callbacks 2 binder_call(hal_graphics_composer_client, hal_graphics_composer_server) 3 binder_call(hal_graphics_composer_server, hal_graphics_composer_client) 4 5 add_hwservice(hal_graphics_composer_server, hal_graphics_composer_hwservice) 6 allow hal_graphics_composer_client hal_graphics_composer_hwservice:hwservice_manager find; 7 8 # Coordinate with hal_graphics_mapper 9 allow hal_graphics_composer_server hal_graphics_mapper_hwservice:hwservice_manager find; 10 11 # GPU device access 12 allow hal_graphics_composer gpu_device:chr_file rw_file_perms; 13 allow hal_graphics_composer ion_device:chr_file r_file_perms; 14 allow hal_graphics_composer hal_graphics_allocator:fd use; 15 16 # Access /dev/graphics/fb0. 17 allow hal_graphics_composer graphics_device:dir search; 18 allow hal_graphics_composer graphics_device:chr_file rw_file_perms; 19 20 # Fences 21 allow hal_graphics_composer system_server:fd use; 22 allow hal_graphics_composer bootanim:fd use; 23 allow hal_graphics_composer appdomain:fd use; 24 25 # allow self to set SCHED_FIFO 26 allow hal_graphics_composer self:global_capability_class_set sys_nice; 27