type hal_confirmationui_cuttlefish, domain;
hal_server_domain(hal_confirmationui_cuttlefish, hal_confirmationui)

type hal_confirmationui_cuttlefish_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_confirmationui_cuttlefish)

binder_call(hal_confirmationui_cuttlefish, keystore)

type confirmationui_device, dev_type;

allow hal_confirmationui_cuttlefish device:dir r_dir_perms;
allow hal_confirmationui_cuttlefish confirmationui_device:chr_file rw_file_perms;

vendor_internal_prop(vendor_enable_confirmationui_prop)
get_prop(hal_confirmationui_cuttlefish, vendor_enable_confirmationui_prop)

# Write to kernel log (/dev/kmsg)
allow hal_confirmationui_cuttlefish kmsg_device:chr_file w_file_perms;
allow hal_confirmationui_cuttlefish kmsg_device:chr_file getattr;