type mmi_boot, domain, binder_in_vendor_violators; type mmi_boot_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(mmi_boot) binder_use(mmi_boot) binder_service(mmi_boot) binder_call(mmi_boot, system_server) # shell scripts need to execute /system/bin/sh allow mmi_boot vendor_shell_exec:file rx_file_perms; allow mmi_boot vendor_toolbox_exec:file rx_file_perms; allow mmi_boot vendor_shell_exec:file entrypoint; allow mmi_boot sysfs_socinfo:file write; set_prop(mmi_boot, hw_rev_prop);