1 type rfs_access, domain; 2 type rfs_access_exec, exec_type, vendor_file_type, file_type; 3 4 init_daemon_domain(rfs_access) 5 6 #For tftp server 7 allow rfs_access self:capability { chown setgid setpcap setuid net_bind_service }; 8 9 wakelock_use(rfs_access) 10 11 # For tftp server file access 12 allow rfs_access firmware_file:dir search; 13 allow rfs_access firmware_file:file r_file_perms; 14 allow rfs_access persist_file:dir search; 15 allow rfs_access persist_rfs_file:dir create_dir_perms; 16 allow rfs_access persist_rfs_file:file create_file_perms; 17 18 allow rfs_access self:socket create_socket_perms_no_ioctl; 19
