Home | History | Annotate | Download | only in sepolicy 
      1 # /vendor/bin/init.radio.sh
      2 type init_radio, domain;
      3 type init_radio_exec, exec_type, vendor_file_type, file_type;
      4 
      5 init_daemon_domain(init_radio)
      6 
      7 # copy files from /firmware to /data/misc/radio
      8 allow init_radio vendor_shell_exec:file rx_file_perms;
      9 allow init_radio vendor_toolbox_exec:file rx_file_perms;
     10 allow init_radio firmware_file:dir r_dir_perms;
     11 allow init_radio firmware_file:file r_file_perms;
     12 allow init_radio self:capability chown;
     13 
     14 # TODO(b/68015003): Remove data_between_core_and_vendor_violators once
     15 # init_radio no longer directly accesses /data owned by the radio app.
     16 typeattribute init_radio data_between_core_and_vendor_violators;
     17 allow init_radio radio_data_file:dir create_dir_perms;
     18 allow init_radio radio_data_file:file create_file_perms;
     19 allow init_radio radio_data_file:file w_file_perms;
     20