1 type hal_gnss_qti, domain; 2 hal_server_domain(hal_gnss_qti, hal_gnss) 3 4 type hal_gnss_qti_exec, exec_type, vendor_file_type, file_type; 5 init_daemon_domain(hal_gnss_qti) 6 7 r_dir_file(hal_gnss_qti, sysfs_msm_subsys) 8 9 vndbinder_use(hal_gnss_qti) 10 11 allow hal_gnss_qti sysfs_soc:dir r_dir_perms; 12 allow hal_gnss_qti sysfs_soc:file r_file_perms; 13 14 binder_call(hal_gnss_qti, per_mgr) 15 allow hal_gnss_qti per_mgr_service:service_manager find; 16 17 userdebug_or_eng(` 18 allow hal_gnss_qti diag_device:chr_file rw_file_perms; 19 ') 20 21 # /data/vendor/location 22 allow hal_gnss_qti location_data_file:dir create_dir_perms; 23 allow hal_gnss_qti location_data_file:sock_file { create unlink write}; 24 allow hal_gnss_qti location_data_file:file create_file_perms; 25 26 # /dev/socket/location 27 allow hal_gnss_qti location_socket:sock_file create_file_perms; 28 allow hal_gnss_qti location_socket:dir rw_dir_perms; 29 30 # xtra/socket_xtra 31 allow hal_gnss_qti location:unix_dgram_socket sendto; 32 33 allow hal_gnss_qti self:socket create_socket_perms; 34 allowxperm hal_gnss_qti self:socket ioctl msm_sock_ipc_ioctls; 35 36 unix_socket_connect(hal_gnss_qti, netmgrd, netmgrd) 37 allow hal_gnss_qti netmgrd_socket:dir search; 38 39 allow hal_gnss_qti self:netlink_generic_socket { bind create read }; 40 allow hal_gnss_qti self:netlink_route_socket { bind create nlmsg_read read write }; 41 42 dontaudit hal_gnss_qti kernel:system module_request; 43
