Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 1 | #dpmd as domain |
| 2 | type dpmd, domain; |
| 3 | type dpmd_exec, exec_type, file_type; |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 4 | file_type_auto_trans(dpmd, socket_device, dpmwrapper_socket); |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 5 | init_daemon_domain(dpmd) |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 6 | net_domain(dpmd) |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 7 | allow dpmd dpmd_exec:file execute_no_trans; |
| 8 | |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 9 | #allow dpmd to access dpm_data_file |
| 10 | allow dpmd dpmd_data_file:file create_file_perms; |
| 11 | allow dpmd dpmd_data_file:dir create_dir_perms; |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 12 | |
| 13 | #allow dpmd to access qmux radio socket |
| 14 | qmux_socket(dpmd); |
| 15 | |
| 16 | #self capability |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 17 | allow dpmd sysfs_wake_lock:file rw_file_perms; |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 18 | allow dpmd self:socket rw_socket_perms; |
| 19 | allow dpmd self:netlink_socket rw_socket_perms; |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 20 | allow dpmd self:capability { setuid setgid dac_override net_raw chown fsetid net_admin sys_module }; |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 21 | |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 22 | #socket, self |
| 23 | allow dpmd smem_log_device:chr_file rw_file_perms; |
| 24 | unix_socket_connect(dpmd, property, init) |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 25 | allow dpmd self:capability2 block_suspend; |
| 26 | allow dpmd system_prop:property_service set; |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 27 | allow dpmd ctl_default_prop:property_service set; |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 28 | |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 29 | #misc. |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 30 | allow dpmd shell_exec:file { read execute open execute_no_trans }; |
| 31 | allow dpmd system_file:file execute_no_trans; |
| 32 | |
| 33 | #kernel |
| 34 | allow dpmd kernel:system module_request; |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 35 | |
| 36 | #appdomain |
| 37 | allow dpmd appdomain:fd use; |
| 38 | allow dpmd appdomain:tcp_socket { read write getopt }; |