Home | History | Annotate | Download | only in sepolicy
      1 # phone subsystem
      2 type radio, domain;
      3 app_domain(radio)
      4 net_domain(radio)
      5 bluetooth_domain(radio)
      6 binder_service(radio)
      7 
      8 # Talks to init via the property socket.
      9 unix_socket_connect(radio, property, init)
     10 
     11 # Talks to rild via the rild socket.
     12 unix_socket_connect(radio, rild, rild)
     13 
     14 # Data file accesses.
     15 allow radio radio_data_file:dir create_dir_perms;
     16 allow radio radio_data_file:notdevfile_class_set create_file_perms;
     17 
     18 allow radio alarm_device:chr_file rw_file_perms;
     19 
     20 # Property service
     21 allow radio radio_prop:property_service set;
     22 allow radio net_radio_prop:property_service set;
     23 allow radio system_radio_prop:property_service set;
     24 auditallow radio net_radio_prop:property_service set;
     25 auditallow radio system_radio_prop:property_service set;
     26 
     27 # ctl interface
     28 allow radio ctl_rildaemon_prop:property_service set;
     29 
     30 allow radio radio_service:service_manager add;
     31