blob: d8e48d5e67f85148ab81f74391e377d2272ace4a [file] [log] [blame]
Stephen Smalley2dd4e512012-01-04 12:33:27 -05001# rild - radio interface layer daemon
2type rild, domain;
3type rild_exec, exec_type, file_type;
4
5init_daemon_domain(rild)
6net_domain(rild)
Stephen Smalley16011322014-02-24 15:06:11 -05007allow rild self:netlink_route_socket nlmsg_write;
Stephen Smalleydcbab902013-10-29 14:42:39 -04008allow rild kernel:system module_request;
9unix_socket_connect(rild, property, init)
Stephen Smalleydcbab902013-10-29 14:42:39 -040010allow rild self:capability { setuid net_admin net_raw };
11allow rild alarm_device:chr_file rw_file_perms;
12allow rild cgroup:dir create_dir_perms;
13allow rild radio_device:chr_file rw_file_perms;
14allow rild radio_device:blk_file r_file_perms;
Stephen Smalleydcbab902013-10-29 14:42:39 -040015allow rild mtd_device:dir search;
16allow rild efs_file:dir create_dir_perms;
17allow rild efs_file:file create_file_perms;
18allow rild shell_exec:file rx_file_perms;
19allow rild bluetooth_efs_file:file r_file_perms;
20allow rild bluetooth_efs_file:dir r_dir_perms;
21allow rild radio_data_file:dir rw_dir_perms;
22allow rild radio_data_file:file create_file_perms;
23allow rild sdcard_type:dir r_dir_perms;
Stephen Smalley9e012cd2014-03-18 14:01:27 -040024allow rild system_data_file:dir r_dir_perms;
25allow rild system_data_file:file r_file_perms;
Stephen Smalleydcbab902013-10-29 14:42:39 -040026allow rild system_file:file x_file_perms;
Stephen Smalleydcbab902013-10-29 14:42:39 -040027
28# property service
Stephen Smalleydcbab902013-10-29 14:42:39 -040029allow rild radio_prop:property_service set;
Stephen Smalleyfee49152014-06-19 10:27:02 -040030allow rild net_radio_prop:property_service set;
31allow rild system_radio_prop:property_service set;
32auditallow rild net_radio_prop:property_service set;
33auditallow rild system_radio_prop:property_service set;
Stephen Smalleydcbab902013-10-29 14:42:39 -040034
35# Read/Write to uart driver (for GPS)
36allow rild gps_device:chr_file rw_file_perms;
37
38allow rild tty_device:chr_file rw_file_perms;
39
Stephen Smalley16011322014-02-24 15:06:11 -050040# Allow rild to create and use netlink sockets.
41allow rild self:netlink_socket create_socket_perms;
42allow rild self:netlink_kobject_uevent_socket create_socket_perms;
William Robertsec7d39b2013-09-28 18:46:21 -040043
44# Access to wake locks
Nick Kralevich8599e342014-05-23 13:33:32 -070045wakelock_use(rild)
Robert Craigaa376832013-12-05 17:24:03 -050046
47allow rild self:socket create_socket_perms;