1 # phone subsystem 2 type radio, domain, domain_deprecated, mlstrustedsubject; 3 app_domain(radio) 4 net_domain(radio) 5 bluetooth_domain(radio) 6 binder_service(radio) 7 8 # Talks to rild via the rild socket. 9 unix_socket_connect(radio, rild, rild) 10 11 # Data file accesses. 12 allow radio radio_data_file:dir create_dir_perms; 13 allow radio radio_data_file:notdevfile_class_set create_file_perms; 14 15 allow radio alarm_device:chr_file rw_file_perms; 16 17 allow radio net_data_file:dir search; 18 allow radio net_data_file:file r_file_perms; 19 20 # Property service 21 set_prop(radio, radio_prop) 22 set_prop(radio, system_radio_prop) 23 set_prop(radio, net_radio_prop) 24 auditallow radio net_radio_prop:property_service set; 25 auditallow radio system_radio_prop:property_service set; 26 27 # ctl interface 28 set_prop(radio, ctl_rildaemon_prop) 29 30 allow radio audioserver_service:service_manager find; 31 allow radio cameraserver_service:service_manager find; 32 allow radio drmserver_service:service_manager find; 33 allow radio mediaserver_service:service_manager find; 34 allow radio nfc_service:service_manager find; 35 allow radio radio_service:service_manager { add find }; 36 allow radio surfaceflinger_service:service_manager find; 37 allow radio app_api_service:service_manager find; 38 allow radio system_api_service:service_manager find; 39
