You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
38 lines
2.1 KiB
38 lines
2.1 KiB
; THIS IS A WORKAROUND for the current limitations of the module policy language |
|
; This should be used sparingly until we figure out a saner way to achieve the |
|
; stuff below, for example, by improving typeattribute statement of module |
|
; language. |
|
; |
|
; NOTE: This file has no effect on recovery policy. |
|
|
|
; Apps, except isolated apps, are clients of Allocator HAL |
|
; Unfortunately, we can't currently express this in module policy language: |
|
; typeattribute { appdomain -isolated_app } hal_allocator_client; |
|
; typeattribute hal_allocator_client halclientdomain; |
|
(typeattributeset hal_allocator_client ((and (appdomain) ((not (isolated_app)))))) |
|
(typeattributeset halclientdomain (hal_allocator_client)) |
|
|
|
; Apps, except isolated apps, are clients of Configstore HAL |
|
; Unfortunately, we can't currently express this in module policy language: |
|
; typeattribute { appdomain -isolated_app } hal_configstore_client; |
|
(typeattributeset hal_configstore_client ((and (appdomain) ((not (isolated_app)))))) |
|
|
|
; Apps, except isolated apps, are clients of Graphics Allocator HAL |
|
; Unfortunately, we can't currently express this in module policy language: |
|
; typeattribute { appdomain -isolated_app } hal_graphics_allocator_client; |
|
(typeattributeset hal_graphics_allocator_client ((and (appdomain) ((not (isolated_app)))))) |
|
|
|
; Apps, except isolated apps, are clients of Cas HAL |
|
; Unfortunately, we can't currently express this in module policy language: |
|
; typeattribute { appdomain -isolated_app } hal_cas_client; |
|
(typeattributeset hal_cas_client ((and (appdomain) ((not (isolated_app)))))) |
|
|
|
; Domains hosting Camera HAL implementations are clients of Allocator HAL |
|
; Unfortunately, we can't currently express this in module policy language: |
|
; typeattribute hal_camera hal_allocator_client; |
|
(typeattributeset hal_allocator_client (hal_camera)) |
|
|
|
; Apps, except isolated apps, are clients of Neuralnetworks HAL |
|
; Unfortunately, we can't currently express this in module policy language: |
|
; typeattribute { appdomain -isolated_app } hal_neuralnetworks_client; |
|
(typeattributeset hal_neuralnetworks_client ((and (appdomain) ((not (isolated_app))))))
|
|
|