device_google_zumapro/sepolicy/radio/modem_ml_svc_sit.te
Michael Bestas eabe516eef
Add 'sepolicy/' from tag 'android-15.0.0_r2'
git-subtree-dir: sepolicy
git-subtree-mainline: 68bba197f4
git-subtree-split: 36623ceb5d
Change-Id: I8abfa4d1b1cb245da2c562eed56c4f8c78ae0ede
2024-10-27 13:25:24 +02:00

30 lines
1.1 KiB
Text

type modem_ml_svc_sit, domain;
type modem_ml_svc_sit_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(modem_ml_svc_sit)
binder_use(modem_ml_svc_sit)
# Grant radio device access
allow modem_ml_svc_sit radio_device:chr_file rw_file_perms;
# Grant vendor radio and modem file/dir creation permission
allow modem_ml_svc_sit radio_vendor_data_file:dir create_dir_perms;
allow modem_ml_svc_sit radio_vendor_data_file:file create_file_perms;
# Grant modem ml data file/dir creation permission
allow modem_ml_svc_sit modem_ml_data_file:dir create_dir_perms;
allow modem_ml_svc_sit modem_ml_data_file:file create_file_perms;
# Grant modem ml models config files access
allow modem_ml_svc_sit modem_config_file:file r_file_perms;
# RIL property
get_prop(modem_ml_svc_sit, vendor_rild_prop)
# Access to NNAPI service
hal_client_domain(modem_ml_svc_sit, hal_neuralnetworks)
allow modem_ml_svc_sit edgetpu_nnapi_service:service_manager find;
# Access to TFLite binder service
allow modem_ml_svc_sit modemml_tflite_service:service_manager find;
binder_call(modem_ml_svc_sit, system_server)