1 type tango_core, domain, coredomain; 2 3 app_domain(tango_core) 4 #from system/sepolicy/private/untrusted_app.te 5 untrusted_app_domain(tango_core) 6 net_domain(tango_core) 7 bluetooth_domain(tango_core) 8 9 #from system/sepolicy/private/untrusted_app.te 10 allow tango_core system_server:udp_socket { connect getattr read recvfrom sendto write }; 11 12 #calibration files 13 allow tango_core persist_file:dir search; 14 allow tango_core persist_sensors_file:dir search; 15 allow tango_core persist_sensors_file:file { getattr open read }; 16 17 # Allow access to necessary vendor libraries to execute Hexagon code 18 allow tango_core hexagon_halide_file:file { execute read open getattr }; 19 allow tango_core qdsp_device:chr_file { ioctl open read }; 20
