1 # kickstart processes and scripts (system process) 2 type kickstart, domain; 3 type kickstart_exec, file_type, exec_type; 4 5 init_daemon_domain(kickstart) 6 7 # Run kickstart_checker.sh 8 allow kickstart shell_exec:file rx_file_perms; 9 allow kickstart kickstart_exec:file rx_file_perms; 10 11 # kickstart_checker.sh changes block devices 12 # /dev/block/platform/msm_sdcc.1/by-name/m9kefs* 13 allow kickstart self:capability { chown fowner }; 14 15 # Let qcks access /dev/mdm node (modem driver) 16 allow kickstart radio_device:chr_file r_file_perms; 17 18 # Access USB host ks bridge drivers 19 allow kickstart kickstart_device:chr_file rw_file_perms; 20 21 # Read and write to /dev/block/mmcblk0p[567] 22 allow kickstart efs_block_device:blk_file { setattr rw_file_perms }; 23 allow kickstart block_device:dir { getattr write search }; 24 25 # Write contents of block device to kickstart data dir 26 allow kickstart kickstart_data_file:file create_file_perms; 27 allow kickstart kickstart_data_file:dir rw_dir_perms; 28 29 # Read radio firmware file(s) 30 allow kickstart radio_efs_file:dir search; 31 allow kickstart radio_efs_file:file r_file_perms; 32 33 # Run dd from toolbox on firmware files 34 allow kickstart shell_exec:file rx_file_perms; 35 allow kickstart system_file:file execute_no_trans; 36 37 # Wake lock access 38 wakelock_use(kickstart) 39 40 # Set property key gsm.radio.kickstart 41 allow kickstart radio_prop:property_service set; 42 unix_socket_connect(kickstart, property, init) 43 44 # Access /sys/module/rmnet_usb/parameters/rmnet_data_init 45 allow kickstart sysfs_rmnet:file w_file_perms; 46
