summaryrefslogtreecommitdiffstats
path: root/selinux/netmgrd.te
diff options
context:
space:
mode:
authorJoey Hewitt <joey@joeyhewitt.com>2019-09-02 21:24:47 -0600
committerJoey Hewitt <joey@joeyhewitt.com>2019-09-02 21:25:54 -0600
commita83b24ba10576ec8c815df0ccaa97791e2c4537f (patch)
tree3375481d607172dc6e7b79bede7da3e8afa00252 /selinux/netmgrd.te
parent37c4769bcc40f7004b1ae2eb04cb1049121402aa (diff)
downloaddevice_samsung_t0lte-a83b24ba10576ec8c815df0ccaa97791e2c4537f.tar.gz
device_samsung_t0lte-a83b24ba10576ec8c815df0ccaa97791e2c4537f.tar.bz2
device_samsung_t0lte-a83b24ba10576ec8c815df0ccaa97791e2c4537f.zip
remove references to proprietary stuff, mostly ril
Diffstat (limited to 'selinux/netmgrd.te')
-rwxr-xr-xselinux/netmgrd.te32
1 files changed, 0 insertions, 32 deletions
diff --git a/selinux/netmgrd.te b/selinux/netmgrd.te
deleted file mode 100755
index 8b99f42..0000000
--- a/selinux/netmgrd.te
+++ /dev/null
@@ -1,32 +0,0 @@
-# Network utilities (radio process)
-type netmgrd, domain;
-type netmgrd_exec, exec_type, file_type;
-
-net_domain(netmgrd)
-# Started by init
-init_daemon_domain(netmgrd)
-
-
-allow netmgrd self:udp_socket { create ioctl };
-# fsetid, dac_override unlink on /dev/socket/qmux_radio/qmux_client_socket
-allow netmgrd self:capability { sys_module fsetid setuid setgid net_admin net_raw dac_override };
-allow netmgrd self:packet_socket { write bind read create };
-allow netmgrd self:netlink_socket { write read create bind setopt };
-allow netmgrd self:netlink_route_socket { create bind read write nlmsg_read nlmsg_write setopt getattr };
-
-# Talk to qmuxd
-qmux_socket(netmgrd)
-
-# Allow logging diagnostic items
-allow netmgrd diagnostic_device:chr_file rw_file_perms;
-
-# /data/data_test/ access with shell
-allow netmgrd shell_exec:file { execute read open execute_no_trans };
-allow netmgrd system_file:file { execute_no_trans };
-
-# Talk to init over the property socket
-unix_socket_connect(netmgrd, property, init)
-# Set net.rmnet_usb0. values
-allow netmgrd radio_prop:property_service set;
-
-allow netmgrd netmgrd:process { execmem };