espresso-common: Update SELinux Policies [1/2]

Update policies, as well as commonize them here.

Big thanks to Andreas B. for starting this off!

Note:
moved to espresso-common, needs some cleanup later

Change-Id: I52c676e1ebd0bfb040cdd10eae429ee94e666fc6

1 files changed, 16 insertions, 0 deletions

diff --git a/sepolicy/rild.te b/sepolicy/rild.te
new file mode 100644
index 0000000..f23a4ca
--- /dev/null
+++ b/sepolicy/rild.te
@@ -0,0 +1,16 @@
+# rild
+allow rild block_device:dir { search };
+allow rild dumpstate_exec:file getattr;
+allow rild efs_block_device:blk_file rw_file_perms;
+allow rild efs_block_device:dir { search };
+allow rild efs_file:file { read open write getattr setattr append };
+allow rild efs_file:dir { search };
+allow rild radio_data_file:dir { setattr };
+allow rild radio_device:chr_file rw_file_perms;
+allow rild self:netlink_kobject_uevent_socket { create bind read write };
+allow rild self:netlink_route_socket { write };
+allow rild self:netlink_socket { create bind read write };
+allow rild self:process { execmem };
+allow rild system_data_file:dir { getattr setattr write remove_name add_name search };
+allow rild system_data_file:file { getattr unlink create write setattr read open append };
+allow rild unlabeled:dir search;