Home | History | Annotate | Download | only in sepolicy
      1 # nfc subsystem
      2 type nfc, domain, domain_deprecated;
      3 app_domain(nfc)
      4 net_domain(nfc)
      5 binder_service(nfc)
      6 
      7 # Set NFC properties
      8 set_prop(nfc, nfc_prop)
      9 
     10 # NFC device access.
     11 allow nfc nfc_device:chr_file rw_file_perms;
     12 
     13 # Data file accesses.
     14 allow nfc nfc_data_file:dir create_dir_perms;
     15 allow nfc nfc_data_file:notdevfile_class_set create_file_perms;
     16 
     17 allow nfc sysfs_nfc_power_writable:file rw_file_perms;
     18 allow nfc sysfs:file write;
     19 
     20 # TODO: added to match above sysfs rule. Remove me?
     21 allow nfc sysfs_usb:file write;
     22 
     23 # SoundPool loading and playback
     24 allow nfc audioserver_service:service_manager find;
     25 allow nfc drmserver_service:service_manager find;
     26 allow nfc mediacodec_service:service_manager find;
     27 allow nfc mediaextractor_service:service_manager find;
     28 allow nfc mediaserver_service:service_manager find;
     29 
     30 allow nfc nfc_service:service_manager { add find };
     31 allow nfc radio_service:service_manager find;
     32 allow nfc surfaceflinger_service:service_manager find;
     33 allow nfc app_api_service:service_manager find;
     34 allow nfc system_api_service:service_manager find;
     35 
     36 # already open bugreport file descriptors may be shared with
     37 # the nfc process, from a file in
     38 # /data/data/com.android.shell/files/bugreports/bugreport-*.
     39 allow nfc shell_data_file:file read;
     40