You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
29 lines
1.5 KiB
29 lines
1.5 KiB
4 months ago
|
; THIS IS A WORKAROUND for the current limitations of the module policy language
|
||
|
|
; This should be used sparingly until we figure out a saner way to achieve the
|
||
|
|
; stuff below, for example, by improving typeattribute statement of module
|
||
|
|
; language.
|
||
|
|
;
|
||
|
|
; NOTE: This file has no effect on recovery policy.
|
||
|
|
|
||
|
|
; Apps, except isolated apps, are clients of Allocator HAL
|
||
|
|
; Unfortunately, we can't currently express this in module policy language:
|
||
|
|
; typeattribute { appdomain -isolated_app } hal_allocator_client;
|
||
|
|
; typeattribute hal_allocator_client halclientdomain;
|
||
|
|
(typeattributeset hal_allocator_client ((and (appdomain) ((not (isolated_app))))))
|
||
|
|
(typeattributeset halclientdomain (hal_allocator_client))
|
||
|
|
|
||
|
|
; Apps, except isolated apps, are clients of Configstore HAL
|
||
|
|
; Unfortunately, we can't currently express this in module policy language:
|
||
|
|
; typeattribute { appdomain -isolated_app } hal_configstore_client;
|
||
|
|
(typeattributeset hal_configstore_client ((and (appdomain) ((not (isolated_app))))))
|
||
|
|
|
||
|
|
; Apps, except isolated apps, are clients of Graphics Allocator HAL
|
||
|
|
; Unfortunately, we can't currently express this in module policy language:
|
||
|
|
; typeattribute { appdomain -isolated_app } hal_graphics_allocator_client;
|
||
|
|
(typeattributeset hal_graphics_allocator_client ((and (appdomain) ((not (isolated_app))))))
|
||
|
|
|
||
|
|
; Domains hosting Camera HAL implementations are clients of Allocator HAL
|
||
|
|
; Unfortunately, we can't currently express this in module policy language:
|
||
|
|
; typeattribute hal_camera hal_allocator_client;
|
||
|
|
(typeattributeset hal_allocator_client (hal_camera))
|