Home | History | Annotate | Download | only in sepolicy
      1 type bullhead-sh, domain, device_domain_deprecated;
      2 type bullhead-sh_exec, exec_type, file_type;
      3 
      4 # Started by init
      5 init_daemon_domain(bullhead-sh)
      6 
      7 # Access to /data/misc/radio/*
      8 allow bullhead-sh radio_data_file:file create_file_perms;
      9 allow bullhead-sh radio_data_file:dir create_dir_perms;
     10 
     11 # Chwon /data/misc/radio/modem_config
     12 allow bullhead-sh self:capability chown;
     13 
     14 # Copy /firmware/image/modem_pr/mcfg/configs/ to /data/misc/radio/*
     15 allow bullhead-sh firmware_file:file r_file_perms;
     16 allow bullhead-sh firmware_file:dir r_dir_perms;
     17 
     18 allow bullhead-sh shell_exec:file r_file_perms;
     19 
     20 # execute toybox/toolbox
     21 allow bullhead-sh toolbox_exec:file rx_file_perms;
     22