# SE policies for IFingerprintDebug
type hal_fingerprint_debug_service, hal_service_type, protected_service, service_manager_type;

userdebug_or_eng(`
    # Declare domains for the debug host HAL server/client.
    hal_attribute(fingerprint_debug)

    hal_server_domain(hal_fingerprint_default, hal_fingerprint_debug)

    # Ensure that the server and client can communicate with each other,
    # bi-directionally (in the case of callbacks from server to client, for
    # example).
    binder_call(hal_fingerprint_debug_client, hal_fingerprint_debug_server)
    binder_call(hal_fingerprint_debug_server, hal_fingerprint_debug_client)

    binder_call(hal_fingerprint_debug_server, servicemanager)
    hal_attribute_service(hal_fingerprint_debug, hal_fingerprint_debug_service)

    # Allow all priv-apps to communicate with the fingerprint debug HAL on
    # userdebug or eng builds.
    hal_client_domain(priv_app, hal_fingerprint_debug)

    binder_call(priv_app, hal_fingerprint_default)
')