1 # rild - radio interface layer daemon 2 type rild, domain, domain_deprecated; 3 type rild_exec, exec_type, file_type; 4 5 init_daemon_domain(rild) 6 net_domain(rild) 7 allow rild self:netlink_route_socket nlmsg_write; 8 allow rild kernel:system module_request; 9 allow rild self:capability { setuid net_admin net_raw }; 10 allow rild alarm_device:chr_file rw_file_perms; 11 allow rild cgroup:dir create_dir_perms; 12 allow rild radio_device:chr_file rw_file_perms; 13 allow rild radio_device:blk_file r_file_perms; 14 allow rild mtd_device:dir search; 15 allow rild efs_file:dir create_dir_perms; 16 allow rild efs_file:file create_file_perms; 17 allow rild shell_exec:file rx_file_perms; 18 allow rild bluetooth_efs_file:file r_file_perms; 19 allow rild bluetooth_efs_file:dir r_dir_perms; 20 allow rild radio_data_file:dir rw_dir_perms; 21 allow rild radio_data_file:file create_file_perms; 22 allow rild sdcard_type:dir r_dir_perms; 23 allow rild system_data_file:dir r_dir_perms; 24 allow rild system_data_file:file r_file_perms; 25 allow rild system_file:file x_file_perms; 26 27 # property service 28 set_prop(rild, radio_prop) 29 set_prop(rild, net_radio_prop) 30 set_prop(rild, system_radio_prop) 31 auditallow rild net_radio_prop:property_service set; 32 auditallow rild system_radio_prop:property_service set; 33 34 # Read/Write to uart driver (for GPS) 35 allow rild gps_device:chr_file rw_file_perms; 36 37 allow rild tty_device:chr_file rw_file_perms; 38 39 # Allow rild to create and use netlink sockets. 40 allow rild self:netlink_socket create_socket_perms; 41 allow rild self:netlink_generic_socket create_socket_perms; 42 allow rild self:netlink_kobject_uevent_socket create_socket_perms; 43 44 # Access to wake locks 45 wakelock_use(rild) 46 47 allow rild self:socket create_socket_perms; 48
