Home | History | Annotate | Download | only in sepolicy
      1 type location, domain, device_domain_deprecated;
      2 type location_exec, exec_type, file_type;
      3 
      4 # Started by init
      5 init_daemon_domain(location)
      6 
      7 allow location location_exec:file rx_file_perms;
      8 
      9 allow location self:capability { setuid setgid net_raw };
     10 
     11 allow location self:socket create_socket_perms;
     12 allowxperm location self:socket ioctl msm_sock_ipc_ioctls;
     13 
     14 binder_use(location)
     15 binder_call(location, system_server)
     16 allow location sensorservice_service:service_manager find;
     17 
     18 allow location system_server:unix_stream_socket { read write };
     19 
     20 # slim_daemon
     21 allow location sysfs_msm_subsys:dir r_dir_perms;
     22 allow location sysfs_msm_subsys:lnk_file rw_file_perms;
     23 
     24 qmux_socket(location)
     25