1; THIS IS A WORKAROUND for the current limitations of the module policy language
2; This should be used sparingly until we figure out a saner way to achieve the
3; stuff below, for example, by improving typeattribute statement of module
4; language.
5;
6; NOTE: This file has no effect on recovery policy.
7
8; Apps, except isolated apps, are clients of Allocator HAL
9; Unfortunately, we can't currently express this in module policy language:
10;     typeattribute { appdomain -isolated_app } hal_allocator_client;
11;     typeattribute hal_allocator_client halclientdomain;
12(typeattributeset hal_allocator_client ((and (appdomain) ((not (isolated_app))))))
13(typeattributeset halclientdomain (hal_allocator_client))
14
15; Apps, except isolated apps, are clients of Configstore HAL
16; Unfortunately, we can't currently express this in module policy language:
17;     typeattribute { appdomain -isolated_app } hal_configstore_client;
18(typeattributeset hal_configstore_client ((and (appdomain) ((not (isolated_app))))))
19
20; Apps, except isolated apps, are clients of Graphics Allocator HAL
21; Unfortunately, we can't currently express this in module policy language:
22;     typeattribute { appdomain -isolated_app } hal_graphics_allocator_client;
23(typeattributeset hal_graphics_allocator_client ((and (appdomain) ((not (isolated_app))))))
24
25; Apps, except isolated apps, are clients of Cas HAL
26; Unfortunately, we can't currently express this in module policy language:
27;     typeattribute { appdomain -isolated_app } hal_cas_client;
28(typeattributeset hal_cas_client ((and (appdomain) ((not (isolated_app))))))
29
30; Domains hosting Camera HAL implementations are clients of Allocator HAL
31; Unfortunately, we can't currently express this in module policy language:
32;     typeattribute hal_camera hal_allocator_client;
33(typeattributeset hal_allocator_client (hal_camera))
34
35; Apps, except isolated apps, are clients of Neuralnetworks HAL
36; Unfortunately, we can't currently express this in module policy language:
37;     typeattribute { appdomain -isolated_app } hal_neuralnetworks_client;
38(typeattributeset hal_neuralnetworks_client ((and (appdomain) ((not (isolated_app))))))
39