Home | History | Annotate | Download | only in sepolicy
      1 
      2 type tcmd, domain, domain_deprecated;
      3 type tcmd_exec, exec_type, file_type;
      4 
      5 init_daemon_domain(tcmd)
      6 
      7 # Uses network sockets.
      8 net_domain(tcmd)
      9 
     10 # Allow restart, fastboot, power off
     11 set_prop(tcmd, powerctl_prop)
     12 
     13 # Uses /dev/ttydiag2
     14 allow tcmd diag_device:chr_file rw_file_perms;
     15 
     16 # Uses raw socket
     17 allow tcmd self:capability net_raw;
     18 
     19 # To allow read telephony.db
     20 allow tcmd radio_data_file:dir r_dir_perms;
     21 allow tcmd radio_data_file:file r_file_perms;
     22 
     23 # To allow read/write /persist
     24 allow tcmd persist_file:dir search;
     25 allow tcmd persist_hiddenmenu_file:dir rw_dir_perms;
     26 allow tcmd persist_hiddenmenu_file:file create_file_perms;
     27