Home | History | Annotate | Download | only in sepolicy
      1 binder_call(rild, audioserver)
      2 binder_call(rild, mediaserver)
      3 binder_use(rild)
      4 binder_service(rild)
      5 
      6 # Grant access to Qualcomm MSM Interface (QMI) radio sockets to RILD
      7 qmux_socket(rild)
      8 
      9 allow rild persist_file:dir search;
     10 
     11 # rild needs to parse through /proc to obtain pid of netmgrd
     12 r_dir_file(rild, netmgrd)
     13 # b/18352920 suppress denials until the procfs lookup is removed
     14 dontaudit rild domain:dir r_dir_perms;
     15 
     16 allow rild audioserver_service:service_manager find;
     17 allow rild mediaserver_service:service_manager find;
     18 allow rild per_mgr_service:service_manager find;
     19 
     20 allow rild time_daemon:unix_stream_socket connectto;
     21 
     22 # rild reads qcril.db linked to /system/etc/qcril.db
     23 allow rild radio_data_file:lnk_file read;
     24 
     25 userdebug_or_eng(`
     26   allow rild ssr_device:chr_file { open read };
     27 
     28   allow rild sysfs_ssr:dir { open search read };
     29   allow rild sysfs_ssr:lnk_file { read open };
     30   allow rild sysfs_ssr:dir r_dir_perms;
     31   allow rild sysfs_ssr:lnk_file read;
     32 ')
     33