Home | History | Annotate | Download | only in common
      1 type init-qcom-devstart-sh, domain;
      2 type init-qcom-devstart-sh_exec, exec_type, vendor_file_type, file_type;
      3 
      4 init_daemon_domain(init-qcom-devstart-sh)
      5 
      6 allow init-qcom-devstart-sh vendor_shell_exec:file rx_file_perms;
      7 allow init-qcom-devstart-sh vendor_toolbox_exec:file rx_file_perms;
      8 
      9 # execute grep
     10 allow init-qcom-devstart-sh vendor_file:file rx_file_perms;
     11 
     12 # Set the vendor.qcom.devup property
     13 set_prop(init-qcom-devstart-sh, vendor_device_prop)
     14 # Set the sys.adsp.firmware.version property.
     15 set_prop(init-qcom-devstart-sh, public_vendor_system_prop)
     16 
     17 # Set boot_adsp and boot_slpi to 1
     18 allow init-qcom-devstart-sh sysfs_msm_subsys:file w_file_perms;
     19 
     20 # Initialize Edge Sense.
     21 # See b/67205273.
     22 allow init-qcom-devstart-sh sysfs:dir r_dir_perms;
     23 allow init-qcom-devstart-sh sysfs_pinctrl:dir r_dir_perms;
     24 allow init-qcom-devstart-sh sysfs_pinctrl:file rw_file_perms;
     25 allow init-qcom-devstart-sh sysfs_gpio_export:file w_file_perms;
     26 allow init-qcom-devstart-sh sysfs_soc:dir r_dir_perms;
     27 allow init-qcom-devstart-sh sysfs_soc:file r_file_perms;
     28 allow init-qcom-devstart-sh sysfs_msm_subsys:dir r_dir_perms;
     29 allow init-qcom-devstart-sh sysfs_msm_subsys:file r_file_perms;
     30 allow init-qcom-devstart-sh sysfs_scsi_devices_0000:file r_file_perms;
     31 allow init-qcom-devstart-sh sysfs_pixelstats:file r_file_perms;
     32 # Ignore permissions used but not needed.
     33 dontaudit init-qcom-devstart-sh sysfs:file { create getattr };
     34 dontaudit init-qcom-devstart-sh sysfs_type:dir { read write };
     35 dontaudit init-qcom-devstart-sh sysfs_graphics:file getattr;
     36 dontaudit init-qcom-devstart-sh sysfs_devices_block:file getattr;
     37