Avijit Kanti Das | 345ffcb | 2014-07-24 01:03:22 -0700 | [diff] [blame] | 1 | #============= system_server ============== |
Avijit Kanti Das | 0196c6a | 2014-07-23 23:44:35 -0700 | [diff] [blame] | 2 | # allow system_server to communicate with cnd process over cnd_socket |
| 3 | unix_socket_connect(system_server, cnd, cnd) |
| 4 | # allow system/framework applications to update the cnd configuration files |
| 5 | allow system_server cnd_data_file:dir { read open write getattr add_name }; |
| 6 | allow system_server cnd_data_file:file { create write getattr setattr read lock open }; |
| 7 | |
Avijit Kanti Das | 60e32ec | 2014-10-08 11:47:24 -0700 | [diff] [blame] | 8 | # Access to sensors socket |
| 9 | unix_socket_connect(system_server, sensors, sensors) |
| 10 | unix_socket_send(system_server, sensors, sensors) |
| 11 | allow system_server sensors:unix_stream_socket sendto; |
| 12 | allow system_server sensors_socket:sock_file r_file_perms; |
Biswajit Paul | 64f83f6 | 2014-10-13 14:36:16 -0700 | [diff] [blame] | 13 | qmux_socket(system_server); |
Vince Leung | 06bd7d8 | 2014-10-15 15:15:57 -0700 | [diff] [blame] | 14 | |
| 15 | # access to perflock |
| 16 | allow system_server mpctl_socket:dir r_dir_perms; |
| 17 | unix_socket_send(system_server, mpctl, mpdecision) |
| 18 | unix_socket_connect(system_server, mpctl, mpdecision) |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 19 | |
| 20 | # allow system/framework applications to update the dpmd configuration files |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 21 | unix_socket_connect(system_server, dpmd, dpmd); |
| 22 | allow system_server dpmd_socket:sock_file write; |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 23 | allow system_server dpmd_data_file:dir create_dir_perms; |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 24 | allow system_server dpmservice:service_manager add; |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 25 | allow system_server dpmd_data_file:file create_file_perms; |
Susheel Yadagiri | d0927c6 | 2014-10-14 16:01:45 -0700 | [diff] [blame] | 26 | allow system_server socket_device:sock_file write; |
Bhavya Sokke Mallikarjunappa | 1224bdc | 2014-11-03 13:33:33 -0800 | [diff] [blame] | 27 | |
Vince Leung | 358d6f3 | 2014-10-16 15:10:52 -0700 | [diff] [blame] | 28 | unix_socket_send(system_server, mpctl, perfd) |
| 29 | unix_socket_connect(system_server, mpctl, perfd) |
Tushar Janefalkar | 87c1f92 | 2014-10-21 15:16:12 -0700 | [diff] [blame] | 30 | |
| 31 | allow system_server location:unix_stream_socket connectto; |
| 32 | allow system_server location_data_file:dir rw_dir_perms; |
| 33 | allow system_server location_data_file:fifo_file create_file_perms; |
| 34 | allow system_server location_socket:sock_file rw_file_perms; |
| 35 | allow system_server location_app_data_file:dir r_dir_perms; |
Avijit Kanti Das | c58a6f7 | 2014-10-25 16:34:06 -0700 | [diff] [blame] | 36 | allow system_server location_data_file:sock_file rw_file_perms; |
Biswajit Paul | d8ab626 | 2014-10-23 16:27:42 -0700 | [diff] [blame] | 37 | |
| 38 | #For wifistatemachine |
| 39 | allow system_server kernel:key search; |
Avijit Kanti Das | 42a5819 | 2014-10-31 15:28:08 -0700 | [diff] [blame] | 40 | allow system_server wbc_service:service_manager add; |
Avijit Kanti Das | cf1be2f | 2014-11-07 00:01:45 -0800 | [diff] [blame] | 41 | allow system_server digitalpen_service:service_manager add; |
Avijit Kanti Das | d6e8d8e | 2014-11-07 10:27:44 -0800 | [diff] [blame] | 42 | |
| 43 | #For ssr |
| 44 | allow system_server ssr_device:chr_file { read open }; |
Kurva Harish | a86fd52 | 2014-11-19 17:06:16 -0800 | [diff] [blame] | 45 | |
| 46 | allow system_server fuse:dir search; |
| 47 | allow system_server persist_file:dir search; |
Hemant Gupta | 8678c75 | 2014-11-30 11:04:02 +0530 | [diff] [blame] | 48 | |
| 49 | #For ANT tty communication and to set wc_transport prop |
| 50 | allow system_server bluetooth_prop:property_service set; |
| 51 | allow system_server serial_device:chr_file rw_file_perms; |
| 52 | allow system_server smd_device:chr_file rw_file_perms; |