type feature_enabler_client, domain;
type feature_enabler_client_exec, exec_type, vendor_file_type, file_type;

init_daemon_domain(feature_enabler_client)
vndbinder_use(feature_enabler_client);
allow feature_enabler_client ion_device:chr_file r_file_perms;
allow feature_enabler_client smcinvoke_device:chr_file rw_file_perms;
allow feature_enabler_client graphics_device:chr_file rw_file_perms;
allow feature_enabler_client tee_device:chr_file rw_file_perms;

allow feature_enabler_client mnt_vendor_file:dir search;
allow feature_enabler_client persist_drm_file:dir r_dir_perms;
allow feature_enabler_client persist_file:dir search;
r_dir_file(feature_enabler_client, persist_display_file);

hwbinder_use(feature_enabler_client);

binder_call(feature_enabler_client, hal_graphics_composer)
allow feature_enabler_client qdisplay_service:service_manager find;
add_service(feature_enabler_client, qfeatenab_client_service)
unix_socket_connect(feature_enabler_client, ssgtzd, ssgtzd)