1 # rild - radio interface layer daemon 2 type rild, domain; 3 type rild_exec, exec_type, file_type; 4 5 init_daemon_domain(rild) 6 net_domain(rild) 7 allow rild self:netlink_route_socket setopt; 8 allow rild kernel:system module_request; 9 unix_socket_connect(rild, property, init) 10 unix_socket_connect(rild, qemud, qemud) 11 allow rild self:capability { setuid net_admin net_raw }; 12 allow rild alarm_device:chr_file rw_file_perms; 13 allow rild cgroup:dir create_dir_perms; 14 allow rild radio_device:chr_file rw_file_perms; 15 allow rild qemu_device:chr_file rw_file_perms; 16 allow rild mtd_device:dir search; 17 allow rild efs_file:dir create_dir_perms; 18 allow rild efs_file:file create_file_perms; 19 allow rild shell_exec:file rx_file_perms; 20 dontaudit rild self:capability sys_admin; 21 # XXX Label sysfs files with a specific type? 22 allow rild sysfs:file rw_file_perms; 23 24 # property service 25 allow rild rild_prop:property_service set; 26 allow rild radio_prop:property_service set; 27
