Home | History | Annotate | Download | only in common 
      1 # Policy for pm-service and pm-proxy
      2 type per_mgr, domain;
      3 type per_mgr_exec, exec_type, vendor_file_type, file_type;
      4 
      5 init_daemon_domain(per_mgr);
      6 
      7 add_service(per_mgr, per_mgr_service)
      8 
      9 vndbinder_use(per_mgr)
     10 binder_call(per_mgr, hal_gnss)
     11 binder_call(per_mgr, per_proxy)
     12 binder_call(per_mgr, wcnss_service)
     13 binder_call(per_mgr, rild)
     14 
     15 allow per_mgr self:capability net_bind_service;
     16 
     17 allow per_mgr self:socket create_socket_perms;
     18 allowxperm per_mgr self:socket ioctl msm_sock_ipc_ioctls;
     19 allow per_mgr ssr_device:chr_file { open read };
     20 
     21 r_dir_file(per_mgr, sysfs_msm_subsys)
     22 r_dir_file(per_mgr, sysfs)
     23 
     24 set_prop(per_mgr, per_mgr_state_prop)
     25 
     26 dontaudit per_mgr kernel:system module_request;
     27