Home | History | Annotate | Download | only in sepolicy
      1 # Temperature sensor daemon (root process)
      2 type thermal-engine, domain, domain_deprecated;
      3 type thermal-engine_exec, exec_type, file_type;
      4 
      5 # Started by init
      6 init_daemon_domain(thermal-engine)
      7 
      8 allow thermal-engine smem_log_device:chr_file rw_file_perms;
      9 
     10 allow thermal-engine thermal_device:chr_file rw_file_perms;
     11 
     12 allow thermal-engine self:capability { dac_read_search dac_override fsetid chown };
     13 allow thermal-engine self:capability2 wake_alarm;
     14 
     15 # Talk to qmuxd (/dev/socket/qmux_radio)
     16 qmux_socket(thermal-engine)
     17 
     18 # Create and access to /dev/socket/thermal-.*
     19 type_transition thermal-engine socket_device:sock_file thermal_socket;
     20 allow thermal-engine socket_device:dir w_dir_perms;
     21 allow thermal-engine thermal_socket:sock_file create_file_perms;
     22 
     23 allow thermal-engine self:socket create_socket_perms;
     24 
     25 allow thermal-engine sysfs_thermal:dir r_dir_perms;
     26 allow thermal-engine sysfs_thermal:file rw_file_perms;
     27 allow thermal-engine sysfs_thermal:lnk_file read;
     28 
     29 r_dir_file(thermal-engine, sysfs_ssr)
     30