| # Allow binder communication | |
| binder_use(mm-pp-daemon) | |
| allow mm-pp-daemon { | |
| surfaceflinger_service | |
| sensorservice_service | |
| permission_service | |
| power_service | |
| }:service_manager find; | |
| allow mm-pp-daemon { shell_exec zygote_exec }:file rx_file_perms; | |
| allow mm-pp-daemon system_server:unix_stream_socket rw_socket_perms; | |
| allow mm-pp-daemon ion_device:chr_file w_file_perms; | |
| set_prop(mm-pp-daemon, postprocessing_prop) |