Home | History | Annotate | Download | only in sepolicy
      1 # Grant access to Qualcomm MSM Interface (QMI) radio sockets
      2 qmux_socket(radio)
      3 
      4 allow radio uce_service:service_manager { add find };
      5 
      6 r_dir_file(radio, sysfs_msm_subsys)
      7 
      8 # Access to /vendor/framework/qti-vzw-ims-internal.jar for all
      9 # IMS packages running with com.android.phone sharedUID
     10 allow radio vendor_framework_file:dir { getattr search };
     11 allow radio vendor_framework_file:file { getattr open read };
     12 
     13 # TODO(b/37164021): Remove this once radio no longer communicates with ims over sockets
     14 typeattribute radio socket_between_core_and_vendor_violators;
     15 typeattribute ims socket_between_core_and_vendor_violators;
     16 # communicate with ims
     17 unix_socket_connect(radio, ims, ims)
     18 
     19 # Allow radio to talk to rild over socket
     20 unix_socket_connect(radio, rild, rild)
     21 
     22 # access to /dev/diag on debug builds
     23 userdebug_or_eng(`
     24   allow radio diag_device:chr_file rw_file_perms;
     25 ')
     26 
     27 # access to /dev/avtimer
     28 allow radio avtimer_device:chr_file rw_file_perms;
     29 
     30 allowxperm radio self:udp_socket ioctl priv_sock_ioctls;
     31 
     32 # Needed for use .so files in /vendor/lib64 needed by ims which runs as com.android.phone (radio)
     33 # r_dir_file(radio, vendor_file)
     34 allow radio vendor_file:file rx_file_perms;
     35 
     36 # read access to sys/module/diagchar/parameters/timestamp_switch
     37 allow radio sysfs_timestamp_switch:file r_file_perms;
     38