common/port-bridge.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

type port-bridge, domain;
type port-bridge_exec, exec_type, file_type;
init_daemon_domain(port-bridge)

userdebug_or_eng(`
  domain_auto_trans(shell, port-bridge_exec, netmgrd)
  domain_auto_trans(adbd, port-bridge_exec, netmgrd)
')

#Allow operations on different types of sockets
allow port-bridge port-bridge:netlink_kobject_uevent_socket { create bind read };

#Allow process capabilities
allow port-bridge port-bridge:capability { dac_override };

#Allow operations on mhi transport
allow port-bridge mhi_device:chr_file rw_file_perms;

#Allow operations on gadget serial device
allow port-bridge gadget_serial_device:chr_file { rw_file_perms };