Home | History | Annotate | Download | only in sepolicy
      1 # Policy for /system/bin/rmt_storage
      2 type rmt, domain;
      3 type rmt_exec, exec_type, vendor_file_type, file_type;
      4 
      5 allow rmt self:capability net_bind_service;
      6 
      7 init_daemon_domain(rmt)
      8 wakelock_use(rmt)
      9 
     10 allow rmt self:capability { setgid setpcap setuid };
     11 
     12 allow rmt block_device:dir search;
     13 allow rmt modem_block_device:blk_file rw_file_perms;
     14 
     15 # access to /dev/uio0
     16 allow rmt uio_device:chr_file rw_file_perms;
     17 
     18 allow rmt self:socket create_socket_perms;
     19 allowxperm rmt self:socket ioctl msm_sock_ipc_ioctls;
     20 
     21 allow rmt debugfs_rmt_storage:dir search;
     22 allow rmt debugfs_rmt_storage:file w_file_perms;
     23 
     24 allow rmt sysfs:dir r_dir_perms;
     25 r_dir_file(rmt, sysfs_rmtfs)
     26