1 # rild - radio interface layer daemon 2 type rild, domain; 3 type rild_exec, exec_type, file_type; 4 5 init_daemon_domain(rild) 6 net_domain(rild) 7 allow rild self:netlink_route_socket nlmsg_write; 8 allow rild kernel:system module_request; 9 unix_socket_connect(rild, property, init) 10 allow rild self:capability { setuid net_admin net_raw }; 11 allow rild alarm_device:chr_file rw_file_perms; 12 allow rild cgroup:dir create_dir_perms; 13 allow rild radio_device:chr_file rw_file_perms; 14 allow rild radio_device:blk_file r_file_perms; 15 allow rild mtd_device:dir search; 16 allow rild efs_file:dir create_dir_perms; 17 allow rild efs_file:file create_file_perms; 18 allow rild shell_exec:file rx_file_perms; 19 allow rild bluetooth_efs_file:file r_file_perms; 20 allow rild bluetooth_efs_file:dir r_dir_perms; 21 allow rild radio_data_file:dir rw_dir_perms; 22 allow rild radio_data_file:file create_file_perms; 23 allow rild sdcard_type:dir r_dir_perms; 24 allow rild system_data_file:dir r_dir_perms; 25 allow rild system_data_file:file r_file_perms; 26 allow rild system_file:file x_file_perms; 27 28 # property service 29 allow rild radio_prop:property_service set; 30 allow rild net_radio_prop:property_service set; 31 allow rild system_radio_prop:property_service set; 32 auditallow rild net_radio_prop:property_service set; 33 auditallow rild system_radio_prop:property_service set; 34 35 # Read/Write to uart driver (for GPS) 36 allow rild gps_device:chr_file rw_file_perms; 37 38 allow rild tty_device:chr_file rw_file_perms; 39 40 # Allow rild to create and use netlink sockets. 41 allow rild self:netlink_socket create_socket_perms; 42 allow rild self:netlink_kobject_uevent_socket create_socket_perms; 43 44 # Access to wake locks 45 wakelock_use(rild) 46 47 allow rild self:socket create_socket_perms; 48