Home | History | Annotate | Download | only in sepolicy
      1 # rild - radio interface layer daemon
      2 type rild, domain;
      3 type rild_exec, exec_type, file_type;
      4 
      5 init_daemon_domain(rild)
      6 net_domain(rild)
      7 allow rild self:netlink_route_socket nlmsg_write;
      8 allow rild kernel:system module_request;
      9 unix_socket_connect(rild, property, init)
     10 allow rild self:capability { setuid net_admin net_raw };
     11 allow rild alarm_device:chr_file rw_file_perms;
     12 allow rild cgroup:dir create_dir_perms;
     13 allow rild radio_device:chr_file rw_file_perms;
     14 allow rild radio_device:blk_file r_file_perms;
     15 allow rild mtd_device:dir search;
     16 allow rild efs_file:dir create_dir_perms;
     17 allow rild efs_file:file create_file_perms;
     18 allow rild shell_exec:file rx_file_perms;
     19 allow rild bluetooth_efs_file:file r_file_perms;
     20 allow rild bluetooth_efs_file:dir r_dir_perms;
     21 allow rild radio_data_file:dir rw_dir_perms;
     22 allow rild radio_data_file:file create_file_perms;
     23 allow rild sdcard_type:dir r_dir_perms;
     24 allow rild system_data_file:dir r_dir_perms;
     25 allow rild system_data_file:file r_file_perms;
     26 allow rild system_file:file x_file_perms;
     27 
     28 # property service
     29 allow rild radio_prop:property_service set;
     30 allow rild net_radio_prop:property_service set;
     31 allow rild system_radio_prop:property_service set;
     32 auditallow rild net_radio_prop:property_service set;
     33 auditallow rild system_radio_prop:property_service set;
     34 
     35 # Read/Write to uart driver (for GPS)
     36 allow rild gps_device:chr_file rw_file_perms;
     37 
     38 allow rild tty_device:chr_file rw_file_perms;
     39 
     40 # Allow rild to create and use netlink sockets.
     41 allow rild self:netlink_socket create_socket_perms;
     42 allow rild self:netlink_kobject_uevent_socket create_socket_perms;
     43 
     44 # Access to wake locks
     45 wakelock_use(rild)
     46 
     47 allow rild self:socket create_socket_perms;
     48