#============= hal_graphics_composer_default ============== hal_client_domain(hal_graphics_composer_default, hal_graphics_allocator); allow hal_graphics_composer_default vndbinder_device:chr_file { ioctl open read write map }; allow hal_graphics_composer_default graphics_device:chr_file { ioctl open read write map }; allow hal_graphics_composer_default gpu_device:chr_file { ioctl open read write map }; allow hal_graphics_composer_default self:vsock_socket create_socket_perms_no_ioctl; allow hal_graphics_composer_default hal_graphics_allocator_default:vsock_socket { read write getattr }; allow hal_graphics_composer_default self:netlink_kobject_uevent_socket { create bind read };