selinux/rild.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

#allow rild qmux_radio_socket:dir { write remove_name search add_name };
#allow rild qmux_radio_socket:sock_file { write create unlink setattr };
#allow rild qmuxd:unix_stream_socket connectto;
qmux_socket(rild);
binder_use(rild)

allow rild ssr_device:chr_file { open read };
allow rild sysfs_esoc:dir { search read open};
allow rild sysfs_esoc:lnk_file { read };
allow rild sysfs_esoc:file { write };
allow rild sysfs_ssr:dir { open search read };
allow rild sysfs_ssr:lnk_file { read open };

allow rild mediaserver:binder { transfer call };

#allow rild diag_device:chr_file { open read write };
allow rild rild_socket:chr_file { open read write };

allow rild sysfs_ssr:dir r_dir_perms;
allow rild sysfs_ssr:lnk_file read;
allow rild system_data_file:dir w_dir_perms;
#allow rild system_data_file:file create_file_perms;
#allow rild time_daemon:unix_stream_socket connectto;

allow rild rild:process execmem;
allow rild diagnostic_device:chr_file { read write open };
allow rild radio_data_file:dir { setattr };
allow rild init:unix_stream_socket { read write };
allow rild proc_net:file { write };

allow rild log_device:chr_file { open };
allow rild log_device:chr_file write;
allow rild self:capability dac_override;