Home | History | Annotate | Download | only in sepolicy
      1 # phone subsystem
      2 type radio, domain;
      3 app_domain(radio)
      4 net_domain(radio)
      5 bluetooth_domain(radio)
      6 binder_service(radio)
      7 
      8 # Talks to init via the property socket.
      9 unix_socket_connect(radio, property, init)
     10 
     11 # Talks to rild via the rild socket.
     12 unix_socket_connect(radio, rild, rild)
     13 
     14 # Data file accesses.
     15 allow radio radio_data_file:dir create_dir_perms;
     16 allow radio radio_data_file:notdevfile_class_set create_file_perms;
     17 
     18 allow radio alarm_device:chr_file rw_file_perms;
     19 
     20 allow radio net_data_file:dir search;
     21 allow radio net_data_file:file r_file_perms;
     22 
     23 # Property service
     24 allow radio radio_prop:property_service set;
     25 allow radio net_radio_prop:property_service set;
     26 allow radio system_radio_prop:property_service set;
     27 auditallow radio net_radio_prop:property_service set;
     28 auditallow radio system_radio_prop:property_service set;
     29 
     30 # ctl interface
     31 allow radio ctl_rildaemon_prop:property_service set;
     32 
     33 allow radio radio_service:service_manager add;
     34