1type hal_light_cuttlefish, domain; 2hal_server_domain(hal_light_cuttlefish, hal_light) 3 4type hal_light_cuttlefish_exec, exec_type, vendor_file_type, file_type; 5init_daemon_domain(hal_light_cuttlefish) 6 7allow hal_light_cuttlefish self:{ socket vsock_socket } { create_socket_perms_no_ioctl listen accept }; 8