1 type location, domain, device_domain_deprecated; 2 type location_exec, exec_type, file_type; 3 4 # Started by init 5 init_daemon_domain(location) 6 7 allow location location_exec:file rx_file_perms; 8 9 allow location self:capability { setuid setgid net_raw }; 10 11 allow location self:socket create_socket_perms; 12 allowxperm location self:socket ioctl msm_sock_ipc_ioctls; 13 14 binder_use(location) 15 binder_call(location, system_server) 16 allow location sensorservice_service:service_manager find; 17 18 allow location system_server:unix_stream_socket { read write }; 19 20 # slim_daemon 21 allow location sysfs_msm_subsys:dir r_dir_perms; 22 allow location sysfs_msm_subsys:lnk_file rw_file_perms; 23 24 qmux_socket(location) 25