1 type init-mcfg-sh, domain, device_domain_deprecated; 2 type init-mcfg-sh_exec, exec_type, file_type; 3 4 init_daemon_domain(init-mcfg-sh) 5 6 allow init-mcfg-sh shell_exec:file rx_file_perms; 7 8 # remove and create /data/misc/radio/modem_config 9 allow init-mcfg-sh radio_data_file:dir create_dir_perms; 10 allow init-mcfg-sh radio_data_file:file create_file_perms; 11 12 allow init-mcfg-sh firmware_file:dir r_dir_perms; 13 allow init-mcfg-sh firmware_file:file r_file_perms; 14 15 # execute toybox/toolbox 16 allow init-mcfg-sh toolbox_exec:file rx_file_perms; 17