kona : MM sepolicy

Change-Id: Ib7816ea15871cc75d8cd68a5d0cbcf5e6fe66c18

1 files changed, 20 insertions, 0 deletions

diff --git a/selinux/at_distributor.te b/selinux/at_distributor.te
new file mode 100644
index 0000000..676e4ce
--- /dev/null
+++ b/selinux/at_distributor.te
@@ -0,0 +1,20 @@
+type at_distributor, domain;
+type at_distributor_exec, exec_type, file_type;
+init_daemon_domain(at_distributor)
+domain_trans(init, rootfs, at_distributor)
+
+allow at_distributor DR-daemon:unix_stream_socket connectto;
+allow at_distributor property_socket:sock_file write;
+allow at_distributor radio_data_file:file { read getattr open };
+allow at_distributor radio_prop:property_service set;
+allow at_distributor rild:unix_stream_socket connectto;
+allow at_distributor self:capability dac_override;
+allow at_distributor serial_device:chr_file { read write ioctl open };
+allow at_distributor sysfs_wake_lock:file { read write open };
+allow at_distributor system_data_file:sock_file write;
+allow at_distributor efs_file:file getattr;
+allow at_distributor init:unix_stream_socket connectto;
+allow at_distributor efs_file:file { read open setattr };
+allow at_distributor self:capability { setuid fowner chown fsetid };
+allow at_distributor radio_data_file:dir search;
+allow at_distributor efs_file:dir search;