1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
#Adding all bt related service to bt domains
type sapd, bluetoothdomain;
type sapd_exec, exec_type, file_type;
domain_auto_trans(init, sapd_exec, bluetooth)
type dun-server, bluetoothdomain;
type dun-server_exec, exec_type, file_type;
domain_auto_trans(init, dun-server_exec, bluetooth)
type btsnoop, bluetoothdomain;
type btsnoop_exec, exec_type, file_type;
domain_auto_trans(init, btsnoop_exec, bluetooth)
type wcnss_filter, bluetoothdomain;
type wcnss_filter_exec, exec_type, file_type;
domain_auto_trans(init, wcnss_filter_exec, bluetooth)
allow bluetooth bluetooth_prop:property_service set;
allow bluetooth sysfs:file w_file_perms;
#Access to /data/media
allow bluetooth media_rw_data_file:dir create_dir_perms;
allow bluetooth media_rw_data_file:file create_file_perms;
#allow proc_sysrq access for crash dump
userdebug_or_eng(`
allow bluetooth proc_sysrq:file w_file_perms;
allow bluetooth debugfs:file r_file_perms;
')
allow bluetooth {
uhid_device
input_device
serial_device
#BT needes read and write on smd device node
smd_device
}:chr_file rw_file_perms;
#Access to persist_file
r_dir_file(bluetooth, persist_file)
allow bluetooth persist_file:file w_file_perms;
#For bluetooth firmware
r_dir_file(bluetooth, bt_firmware_file)
#dun-server requires binding with system_app and servicemanager
binder_use(bluetooth);
binder_call(bluetooth, system_app);
binder_call(bluetooth, servicemanager);
#sapd requires interaction with qmux sockets
qmux_socket(bluetooth);
|
