1 # ueventd seclabel is specified in init.rc since 2 # it lives in the rootfs and has no unique file type. 3 type ueventd, domain; 4 tmpfs_domain(ueventd) 5 allow ueventd rootfs:file r_file_perms; 6 allow ueventd rootfs:file entrypoint; 7 allow ueventd init:process sigchld; 8 allow ueventd self:capability { chown mknod net_admin setgid fsetid sys_rawio dac_override }; 9 allow ueventd device:file create_file_perms; 10 allow ueventd device:chr_file rw_file_perms; 11 allow ueventd sysfs:file rw_file_perms; 12 allow ueventd sysfs:file setattr; 13 allow ueventd tmpfs:chr_file rw_file_perms; 14 allow ueventd dev_type:dir create_dir_perms; 15 allow ueventd dev_type:lnk_file { create unlink }; 16 allow ueventd dev_type:chr_file { create setattr unlink }; 17 allow ueventd dev_type:blk_file { create setattr unlink }; 18 allow ueventd self:netlink_kobject_uevent_socket *; 19 allow ueventd efs_file:dir search; 20 allow ueventd efs_file:file r_file_perms; 21
