1type hal_identity_citadel, domain; 2type hal_identity_citadel_exec, exec_type, vendor_file_type, file_type; 3 4vndbinder_use(hal_identity_citadel) 5binder_call(hal_identity_citadel, citadeld) 6allow hal_identity_citadel citadeld_service:service_manager find; 7allow hal_identity_citadel hal_keymint_citadel:binder call; 8 9hal_server_domain(hal_identity_citadel, hal_identity) 10hal_server_domain(hal_identity_citadel, hal_keymint) 11init_daemon_domain(hal_identity_citadel) 12