type hal_mlipay_default, domain;
hal_server_domain(hal_mlipay_default, hal_mlipay)

type hal_mlipay_default_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_mlipay_default)

# Allow hwbinder call from hal client to server
binder_call(hal_mlipay_client, hal_mlipay_server)

# Add hwservice related rules
add_hwservice(hal_mlipay_server, hal_mlipay_hwservice)
allow hal_mlipay_client hal_mlipay_hwservice:hwservice_manager find;

allow hal_mlipay_default tee_device:chr_file rw_file_perms;
allow hal_mlipay_default ion_device:chr_file r_file_perms;

r_dir_file(hal_mlipay_default, firmware_file)
set_prop(hal_mlipay_default, mlipay_prop);

get_prop(hal_mlipay_default, hal_fingerprint_prop);