Home | History | Annotate | Download | only in sepolicy
      1 binder_call(rild, mediaserver)
      2 binder_use(rild)
      3 binder_service(rild)
      4 
      5 # Grant access to Qualcomm MSM Interface (QMI) radio sockets to RILD
      6 qmux_socket(rild)
      7 
      8 allow rild persist_file:dir search;
      9 allow rild persist_modem_file:dir rw_dir_perms;
     10 allow rild persist_modem_file:file create_file_perms;
     11 
     12 allow rild time:unix_stream_socket connectto;
     13 allow rild sysfs_capsense_update:file { getattr w_file_perms};
     14 allow rild sysfs_sar_wifi:file { getattr w_file_perms};
     15 
     16 allow rild audio_cutback_data_file:dir rw_dir_perms;
     17 allow rild audio_cutback_data_file:sock_file create_file_perms;
     18 # why?
     19 allow rild audio_cutback_data_file:dir setattr;
     20 
     21 # rild needs to parse through /proc to obtain pid of netmgrd
     22 r_dir_file(rild, netmgrd)
     23 # b/18352920 suppress denials until the procfs lookup is removed
     24 dontaudit rild domain:dir r_dir_perms;
     25 
     26 # Allow permissions for FSG
     27 allow rild fsg_file:dir search;
     28 allow rild fsg_file:file r_file_perms;
     29