Home | History | Annotate | Download | only in sepolicy 
      1 # qcom-sh service
      2 type qcom-sh, domain;
      3 type qcom-sh_exec, exec_type, file_type;
      4 
      5 # Started by init
      6 init_daemon_domain(qcom-sh)
      7 
      8 # Set ctl.quipc_* property.
      9 set_prop(qcom-sh, ctl_quipc_igsn_prop)
     10 set_prop(qcom-sh, ctl_quipc_main_prop)
     11 
     12 allow qcom-sh self:capability net_admin;
     13 
     14 # Allow writing of ipv6 network properties
     15 allow qcom-sh proc_net:file w_file_perms;
     16 
     17 allow qcom-sh shell_exec:file r_file_perms;
     18 
     19 allow qcom-sh toolbox_exec:file rx_file_perms;
     20 
     21 allow qcom-sh sysfs:file r_file_perms;
     22