1 # phone subsystem 2 type radio, domain, mlstrustedsubject; 3 4 net_domain(radio) 5 bluetooth_domain(radio) 6 binder_service(radio) 7 8 # Talks to rild via the rild socket only for devices without full treble 9 not_full_treble(`unix_socket_connect(radio, rild, rild)') 10 11 # Data file accesses. 12 allow radio radio_data_file:dir create_dir_perms; 13 allow radio radio_data_file:notdevfile_class_set create_file_perms; 14 15 allow radio alarm_device:chr_file rw_file_perms; 16 17 allow radio net_data_file:dir search; 18 allow radio net_data_file:file r_file_perms; 19 20 # Property service 21 set_prop(radio, radio_prop) 22 set_prop(radio, net_radio_prop) 23 24 # ctl interface 25 set_prop(radio, ctl_rildaemon_prop) 26 27 add_service(radio, radio_service) 28 allow radio audioserver_service:service_manager find; 29 allow radio cameraserver_service:service_manager find; 30 allow radio drmserver_service:service_manager find; 31 allow radio mediaserver_service:service_manager find; 32 allow radio nfc_service:service_manager find; 33 allow radio surfaceflinger_service:service_manager find; 34 allow radio app_api_service:service_manager find; 35 allow radio system_api_service:service_manager find; 36 37 # Perform HwBinder IPC. 38 hwbinder_use(radio) 39 hal_client_domain(radio, hal_telephony) 40
