type hal_mfidoca_default, domain; type hal_mfidoca_default_exec, exec_type, file_type, vendor_file_type; type hal_mfidoca_hwservice, hwservice_manager_type; hal_attribute(mfidoca) allow hal_mfidoca_client hal_mfidoca_server:binder { call transfer }; allow hal_mfidoca_client hal_mfidoca_server:binder transfer; allow hal_mfidoca_client hal_mfidoca_server:fd *; allow hal_mfidoca_server hal_mfidoca_client:binder transfer; allow hal_mfidoca_server hal_mfidoca_client:binder { call transfer }; allow hal_mfidoca_server hal_mfidoca_client:fd *; allow hal_mfidoca_default tee_device:chr_file rw_file_perms; allow hal_mfidoca_default firmware_file:dir r_dir_perms; allow hal_mfidoca_default firmware_file:file r_file_perms; allow hal_mfidoca_default ion_device:chr_file rw_file_perms; allow hal_mfidoca_default vendor_dmabuf_qseecom_heap_device:chr_file { ioctl open read }; allow hal_mfidoca_default vendor_dmabuf_qseecom_ta_heap_device:chr_file { ioctl open read }; allow hal_mfidoca_default hal_mtdservice_default:binder transfer; init_daemon_domain(hal_mfidoca_default) get_prop(hal_mfidoca_default, vendor_fp_prop) get_prop(hal_mfidoca_default, vendor_system_prop) set_prop(hal_mfidoca_default, vendor_payment_security_prop) hwbinder_use(hal_mfidoca_default) hal_server_domain(hal_mfidoca_default, hal_mfidoca) add_hwservice(hal_mfidoca_server, hal_mfidoca_hwservice)