type at_distributor, domain; type at_distributor_exec, exec_type, file_type; init_daemon_domain(at_distributor) domain_trans(init, rootfs, at_distributor) allow at_distributor DR-daemon:unix_stream_socket connectto; allow at_distributor property_socket:sock_file write; allow at_distributor radio_data_file:file { write create read getattr open }; allow at_distributor radio_prop:property_service set; allow at_distributor rild:unix_stream_socket connectto; allow at_distributor self:capability dac_override; allow at_distributor serial_device:chr_file { read write ioctl open }; allow at_distributor sysfs_wake_lock:file { read write open }; allow at_distributor system_data_file:sock_file write; allow at_distributor efs_file:file getattr; allow at_distributor init:unix_stream_socket connectto; allow at_distributor efs_file:file { read open setattr }; allow at_distributor self:capability { setuid fowner chown fsetid }; allow at_distributor efs_file:dir search; allow at_distributor radio_data_file:dir { search add_name write }; allow at_distributor efs_file:dir { search getattr }; allow at_distributor radio_data_file:file setattr; allow at_distributor servicemanager:binder call; allow at_distributor shell_exec:file { read execute open }; allow at_distributor system_file:file execute_no_trans; allow at_distributor zygote_exec:file { read getattr open execute execute_no_trans }; allow at_distributor system_server:binder { transfer call }; allow at_distributor diag_uart_log_exec:file getattr; allow at_distributor gps_device:chr_file { read write ioctl open }; allow at_distributor shell_exec:file execute_no_trans; allow at_distributor radio_data_file:dir search; allow at_distributor radio_data_file:file { read getattr open setattr };