type hal_mlipay_default, domain;
type hal_mlipay_default_exec, exec_type, vendor_file_type, file_type;

hal_server_domain(hal_mlipay_default, hal_mlipay)

init_daemon_domain(hal_mlipay_default)

allow hal_mlipay_default {
  ion_device
  tee_device
}:chr_file rw_file_perms;

r_dir_file(hal_mlipay_default, firmware_file)

get_prop(hal_mlipay_default, vendor_fingerprint_prop)
set_prop(hal_mlipay_default, vendor_tee_listener_prop)