Home | History | Annotate | Download | only in sepolicy
      1 binder_call(rild, audioserver)
      2 binder_call(rild, mediaserver)
      3 binder_use(rild)
      4 binder_service(rild)
      5 
      6 # Grant access to Qualcomm MSM Interface (QMI) radio sockets to RILD
      7 qmux_socket(rild)
      8 
      9 allow rild persist_file:dir search;
     10 allow rild persist_modem_file:dir rw_dir_perms;
     11 allow rild persist_modem_file:file create_file_perms;
     12 
     13 allow rild time:unix_stream_socket connectto;
     14 allow rild sysfs_capsense_update:file { getattr w_file_perms};
     15 allow rild sysfs_sar_wifi:file { getattr w_file_perms};
     16 
     17 allow rild audio_cutback_data_file:dir rw_dir_perms;
     18 allow rild audio_cutback_data_file:sock_file create_file_perms;
     19 # why?
     20 allow rild audio_cutback_data_file:dir setattr;
     21 
     22 # rild needs to parse through /proc to obtain pid of netmgrd
     23 r_dir_file(rild, netmgrd)
     24 # b/18352920 suppress denials until the procfs lookup is removed
     25 dontaudit rild domain:dir r_dir_perms;
     26 
     27 # Allow permissions for FSG
     28 allow rild fsg_file:dir search;
     29 allow rild fsg_file:file r_file_perms;
     30 
     31 allow rild audioserver_service:service_manager find;
     32 allow rild mediaserver_service:service_manager find;
     33