type hal_mlipay_default, domain; type hal_mlipay_default_exec, exec_type, file_type, vendor_file_type; type hal_mlipay_hwservice, hwservice_manager_type; hal_attribute(mlipay) allow hal_mlipay_client hal_mlipay_server:binder { call transfer }; allow hal_mlipay_client hal_mlipay_server:binder transfer; allow hal_mlipay_client hal_mlipay_server:fd *; allow hal_mlipay_client hal_mlipay_hwservice:hwservice_manager find; allow hal_mlipay_server hal_mlipay_client:binder transfer; allow hal_mlipay_server hal_mlipay_client:binder { call transfer }; allow hal_mlipay_server hal_mlipay_client:fd *; allow hal_mlipay_default hal_mlipay_hwservice:hwservice_manager add; allow hal_mlipay_default tee_device:chr_file rw_file_perms; allow hal_mlipay_default firmware_file:dir r_dir_perms; allow hal_mlipay_default firmware_file:file r_file_perms; allow hal_mlipay_default ion_device:chr_file rw_file_perms; allow hal_mlipay_default rootfs:lnk_file r_file_perms; allow hal_mlipay_default vendor_dmabuf_qseecom_heap_device:chr_file { ioctl open read }; allow hal_mlipay_default vendor_dmabuf_qseecom_ta_heap_device:chr_file { ioctl open read }; allow hal_mlipay_default hal_mtdservice_default:binder transfer; init_daemon_domain(hal_mlipay_default) get_prop(hal_mlipay_default, vendor_fp_prop) get_prop(hal_mlipay_default, vendor_system_prop) set_prop(hal_mlipay_default, vendor_payment_security_prop) hwbinder_use(hal_mlipay_default) hal_server_domain(hal_mlipay_default, hal_mlipay) add_hwservice(hal_mlipay_server, hal_mlipay_hwservice)