common/imscm.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

#integrated sensor process
type imscm, domain, domain_deprecated;
type imscm_exec, exec_type, file_type;

# Started by init
init_daemon_domain(imscm)
net_domain(imscm)

# To make VT call
binder_use(imscm)

#Add connectionmanager service
allow imscm imscm_service:service_manager add;

unix_socket_connect(imscm, ims, ims)

# imscm needs to communicate with test app
# using binder call
binder_call(imscm, system_app)
binder_call(imscm, platform_app)

userdebug_or_eng(`
  binder_call(imscm, untrusted_app)
')

# imscm needs read/write access to devpts
allow imscm devpts:chr_file rw_file_perms;