type np_rockchip_drmservice, domain;
type np_rockchip_drmservice_exec, exec_type, vendor_file_type, file_type;

init_daemon_domain(np_rockchip_drmservice)

allow np_rockchip_drmservice sysfs_android_usb:dir { search };
allow np_rockchip_drmservice configfs:dir r_dir_perms;
allow np_rockchip_drmservice configfs:file rw_file_perms;
allow np_rockchip_drmservice proc_cmdline:file r_file_perms;
allow np_rockchip_drmservice vendor_data_file:file rw_file_perms;
allow np_rockchip_drmservice vendor_data_file:dir rw_dir_perms;
allow np_rockchip_drmservice storage_device:chr_file rw_file_perms;

dontaudit np_rockchip_drmservice self:capability { dac_read_search };
dontaudit np_rockchip_drmservice self:capability {dac_override};

set_prop(np_rockchip_drmservice, vendor_drmservice_prop)