SELinux Policies: t0lte family

Change-Id: Ib5951934a62fae38425ef9d324de758c2c69b3cb

1 files changed, 21 insertions, 0 deletions

diff --git a/selinux/qmux.te b/selinux/qmux.te
new file mode 100755
index 0000000..e2a5bbf
--- /dev/null
+++ b/selinux/qmux.te
@@ -0,0 +1,21 @@
+# Qualcomm Management Interface Multiplexer
+type qmux, domain;
+type qmux_exec, exec_type, file_type;
+
+# Started by init
+init_daemon_domain(qmux)
+
+# Create local qmux_connect_socket
+allow qmux qmuxd_socket:dir w_dir_perms;
+allow qmux qmuxd_socket:sock_file { create setattr getattr unlink };
+
+# /dev/hsicctl* node access
+allow qmux radio_device:chr_file rw_file_perms;
+
+# Allow logging diagnostic items
+allow qmux diagnostic_device:chr_file rw_file_perms;
+
+allow qmux self:capability { dac_override setuid };
+
+# XXX Should we label with own type
+allow qmux sysfs:file { open write append read getattr };