1 type ims, domain, device_domain_deprecated; 2 type ims_exec, exec_type, file_type; 3 4 init_daemon_domain(ims) 5 6 # Policy below to be updated per b/23784951 7 allow ims self:capability { net_admin net_raw }; 8 9 binder_use(ims) 10 set_prop(ims, qcom_ims_prop) 11 qmux_socket(ims) 12 unix_socket_connect(ims, cnd, cnd) 13 allowxperm ims self:udp_socket ioctl SIOCDEVPRIVATE_D; 14 15 allow ims ims_service:service_manager add; 16 17 allow ims ims_socket:sock_file write; 18 allow ims self:socket create_socket_perms; 19 allowxperm ims self:socket ioctl msm_sock_ipc_ioctls; 20 allow ims self:udp_socket create_socket_perms; 21 allow ims self:netlink_socket create_socket_perms_no_ioctl; 22 allow ims self:netlink_route_socket { create_socket_perms_no_ioctl nlmsg_write nlmsg_read }; 23 24 allow ims sysfs_msm_subsys:dir r_dir_perms; 25 allow ims sysfs_msm_subsys:lnk_file r_file_perms; 26
