selinux/pvrsrvinit.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

# pvrsrvinit
type pvrsrvinit, domain;
type pvrsrvinit_exec, exec_type, file_type;

init_daemon_domain(pvrsrvinit)

allow pvrsrvinit gpu_device:chr_file rw_file_perms;
allow pvrsrvinit kernel:system module_request;
allow pvrsrvinit self:capability { sys_module };
allow pvrsrvinit system_file:file x_file_perms;
allow pvrsrvinit shell_exec:file rx_file_perms;
allow pvrsrvinit pvrsrvinit_exec:file rx_file_perms;
allow pvrsrvinit property_socket:sock_file write;
allow pvrsrvinit init:unix_stream_socket connectto;
allow pvrsrvinit block_device:dir search;
allow pvrsrvinit gpu_device:chr_file { read write ioctl open };