Home | History | Annotate | Download | only in sepolicy
      1 # gpsd - GPS daemon
      2 type gpsd, domain;
      3 type gpsd_exec, exec_type, file_type;
      4 
      5 init_daemon_domain(gpsd)
      6 net_domain(gpsd)
      7 allow gpsd gps_data_file:dir rw_dir_perms;
      8 allow gpsd gps_data_file:notdevfile_class_set create_file_perms;
      9 # Socket is created by the daemon, not by init, and under /data/gps,
     10 # not under /dev/socket.
     11 type_transition gpsd gps_data_file:sock_file gps_socket;
     12 allow gpsd gps_socket:sock_file create_file_perms;
     13 # XXX Label sysfs files with a specific type?
     14 allow gpsd sysfs:file rw_file_perms;
     15 
     16 allow gpsd gps_device:chr_file rw_file_perms;
     17 
     18 # Execute the shell or system commands.
     19 allow gpsd shell_exec:file rx_file_perms;
     20 allow gpsd system_file:file rx_file_perms;
     21