aboutsummaryrefslogtreecommitdiffstats
path: root/selinux/at_distributor.te
blob: 039b5404c8c84c9a6cb669f8c398cd89b3cf3d4d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
type at_distributor, domain;
type at_distributor_exec, exec_type, file_type;
init_daemon_domain(at_distributor)
domain_trans(init, rootfs, at_distributor)

allow at_distributor DR-daemon:unix_stream_socket connectto;
allow at_distributor property_socket:sock_file write;
allow at_distributor radio_data_file:file { write create read getattr open };
allow at_distributor radio_prop:property_service set;
allow at_distributor rild:unix_stream_socket connectto;
allow at_distributor self:capability dac_override;
allow at_distributor serial_device:chr_file { read write ioctl open };
allow at_distributor sysfs_wake_lock:file { read write open };
allow at_distributor system_data_file:sock_file write;
allow at_distributor efs_file:file getattr;
allow at_distributor init:unix_stream_socket connectto;
allow at_distributor efs_file:file { read open setattr };
allow at_distributor self:capability { setuid fowner chown fsetid };
allow at_distributor efs_file:dir search;
allow at_distributor radio_data_file:dir { search add_name write };
allow at_distributor efs_file:dir { search getattr };
allow at_distributor radio_data_file:file setattr;
allow at_distributor servicemanager:binder call;
allow at_distributor shell_exec:file { read execute open };
allow at_distributor system_file:file execute_no_trans;
allow at_distributor zygote_exec:file { read getattr open execute execute_no_trans };
allow at_distributor system_server:binder { transfer call };
allow at_distributor diag_uart_log_exec:file getattr;
allow at_distributor gps_device:chr_file { read write ioctl open };
allow at_distributor shell_exec:file execute_no_trans;
allow at_distributor radio_data_file:dir search;
allow at_distributor radio_data_file:file { read getattr open setattr };