Home | History | Annotate | Download | only in sepolicy
      1 # Policy for /system/bin/cnss_diag
      2 type cnss_diag, domain;
      3 type cnss_diag_exec, exec_type, file_type;
      4 
      5 # STOPSHIP b/28340421
      6 # Temporarily grant this permission and log its use.
      7 allow cnss_diag self:capability net_admin;
      8 allow cnss_diag self:capability { setgid setuid };
      9 allow cnss_diag self:netlink_socket create_socket_perms;
     10 
     11 auditallow cnss_diag self:capability net_admin;
     12 
     13 init_daemon_domain(cnss_diag)
     14 r_dir_file(cnss_diag, sysfs_type)
     15 
     16 
     17 userdebug_or_eng(`
     18   allow cnss_diag diag_device:chr_file rw_file_perms;
     19 ')
     20