Home | History | Annotate | Download | only in sepolicy 
      1 # init runs /system/bin/touchfwup.sh
      2 type touch_fw_update, domain, device_domain_deprecated;
      3 type touch_fw_update_exec, exec_type, file_type;
      4 type touch_fw_update_log_file, file_type, data_file_type;
      5 
      6 init_daemon_domain(touch_fw_update)
      7 
      8 # Run a shell.
      9 allow touch_fw_update shell_exec:file rx_file_perms;
     10 allow touch_fw_update toolbox_exec:file rx_file_perms;
     11 
     12 # write to /data/misc/touchfwup/rmi4update.txt
     13 allow touch_fw_update touch_fw_update_log_file:file create_file_perms;
     14 allow touch_fw_update touch_fw_update_log_file:dir w_dir_perms;
     15 
     16 # Execute rmi4update
     17 domain_auto_trans(touch_fw_update, rmi4update_exec, rmi4update)
     18 allow touch_fw_update rmi4update_exec:file rx_file_perms;
     19