type vr_wm, domain; type vr_wm_exec, exec_type, file_type; hal_client_domain(vr_wm, hal_graphics_allocator) binder_use(vr_wm) binder_call(vr_wm, virtual_touchpad) binder_call(vr_wm, vr_hwc) allow vr_wm virtual_touchpad_service:service_manager find; allow vr_wm vr_hwc_service:service_manager find; binder_service(vr_wm) add_service(vr_wm, vr_window_manager_service) # Load vendor libraries. allow vr_wm system_file:dir r_dir_perms; allow vr_wm gpu_device:chr_file rw_file_perms; allow vr_wm ion_device:chr_file r_file_perms; # Get buffer metadata. allow vr_wm hal_graphics_allocator:fd use; use_pdx(vr_wm, bufferhubd) use_pdx(vr_wm, sensord) use_pdx(vr_wm, surfaceflinger) use_pdx(vr_wm, performanced)