type rlsservice, domain;
type rlsservice_exec, exec_type, vendor_file_type, file_type;

init_daemon_domain(rlsservice)

vndbinder_use(rlsservice)

add_service(rlsservice, rls_service)

# access rainbow sensor calibration files
allow rlsservice persist_file:dir search;
allow rlsservice persist_camera_file:dir search;
allow rlsservice persist_camera_file:file r_file_perms;
allow rlsservice mnt_vendor_file:dir search;

# access device files
allow rlsservice rls_device:chr_file rw_file_perms;

binder_call(rlsservice, hal_sensors_default)
binder_call(rlsservice, hal_camera_default)

# Allow access to always-on compute device node
allow rlsservice device:dir { read watch };
allow rlsservice aoc_device:chr_file rw_file_perms;

# Allow use of the USF low latency transport
usf_low_latency_transport(rlsservice)