git-subtree-dir: sepolicy git-subtree-mainline:68bba197f4
git-subtree-split:36623ceb5d
Change-Id: I8abfa4d1b1cb245da2c562eed56c4f8c78ae0ede
34 lines
1.6 KiB
Text
34 lines
1.6 KiB
Text
type liboemservice_proxy_default, domain;
|
|
type liboemservice_proxy_default_exec, vendor_file_type, exec_type, file_type;
|
|
init_daemon_domain(liboemservice_proxy_default)
|
|
|
|
# Allow proxy to register as android service.
|
|
binder_use(liboemservice_proxy_default);
|
|
add_service(liboemservice_proxy_default, liboemservice_proxy_service);
|
|
|
|
get_prop(liboemservice_proxy_default, hwservicemanager_prop)
|
|
binder_call(liboemservice_proxy_default, hwservicemanager)
|
|
binder_call(liboemservice_proxy_default, dmd)
|
|
allow liboemservice_proxy_default hal_vendor_oem_hwservice:hwservice_manager find;
|
|
allow liboemservice_proxy_default radio_vendor_data_file:dir create_dir_perms;
|
|
allow liboemservice_proxy_default radio_vendor_data_file:file create_file_perms;
|
|
|
|
# Grant to access serial device for external logging tool
|
|
allow liboemservice_proxy_default serial_device:chr_file rw_file_perms;
|
|
|
|
# Grant to access radio device
|
|
allow liboemservice_proxy_default radio_device:chr_file rw_file_perms;
|
|
|
|
# Grant to access slog dir/file
|
|
allow liboemservice_proxy_default vendor_slog_file:dir create_dir_perms;
|
|
allow liboemservice_proxy_default vendor_slog_file:file create_file_perms;
|
|
|
|
# Grant to access tcp socket
|
|
allow liboemservice_proxy_default node:tcp_socket node_bind;
|
|
allow liboemservice_proxy_default self:tcp_socket { create_socket_perms_no_ioctl listen accept bind };
|
|
|
|
# Grant to access log related properties
|
|
set_prop(liboemservice_proxy_default, vendor_diag_prop)
|
|
set_prop(liboemservice_proxy_default, vendor_slog_prop)
|
|
set_prop(liboemservice_proxy_default, vendor_modem_prop)
|
|
get_prop(liboemservice_proxy_default, vendor_persist_config_default_prop)
|