selinux/geomagneticd.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

type geomagneticd, domain;
type geomagneticd_exec, exec_type, file_type;
init_daemon_domain(geomagneticd)
domain_trans(init, rootfs, geomagneticd)
file_type_auto_trans(geomagneticd, system_data_file, gps_data_file)

allow geomagneticd gps_data_file:file write;
allow geomagneticd input_device:chr_file { read ioctl open };
allow geomagneticd input_device:dir { read open };
allow geomagneticd gps_data_file:file { read getattr open };
allow geomagneticd sysfs:file write;
allow geomagneticd input_device:dir search;
allow geomagneticd gps_data_file:dir { write remove_name add_name };
allow geomagneticd gps_data_file:file { unlink write rename create open setattr };
allow geomagneticd self:capability dac_override;
allow geomagneticd self:capability fowner;
# load SHIM libraries
allow init geomagneticd:process noatsecure;