blob: 1698fd4629f4ae59ca82357189dd8ccc31e15152 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
# location - Location daemon
type location, domain;
type location_exec, exec_type, file_type;
init_daemon_domain(location)
net_domain(location)
# Socket is created by the daemon, not by init, and under /data/gps,
# not under /dev/socket.
type_transition location location_data_file:sock_file location_socket;
qmux_socket(location)
binder_use(location)
binder_call(location, system_server)
allow location location_data_file:dir rw_dir_perms;
allow location location_data_file:fifo_file create_file_perms;
allow location location_data_file:file create_file_perms;
allow location location_exec:file execute_no_trans;
allow location location_socket:sock_file create_file_perms;
allow location self:capability { setuid setgid };
allow location self:socket create_socket_perms;
allow location sensors:unix_stream_socket connectto;
allow location sensors_device:chr_file r_file_perms;
allow location sensors_socket:sock_file w_file_perms;
allow location self:netlink_socket create_socket_perms;
allow location system_server:unix_stream_socket { read write };
dontaudit location domain:dir r_dir_perms;
r_dir_file(location, netmgrd)
|
