summaryrefslogtreecommitdiff
path: root/sepolicy/rmt.te
blob: 2b77c34ff08bc6f788c6c51376151b2e69f1fe7d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
# Policy for /system/bin/rmt_storage
type rmt, domain;
type rmt_exec, exec_type, vendor_file_type, file_type;

# STOPSHIP b/28340421
# Temporarily grant this permission and log its use.
allow rmt self:capability net_bind_service;
auditallow rmt self:capability net_bind_service;

init_daemon_domain(rmt)
wakelock_use(rmt)

allow rmt self:capability { setgid setpcap setuid };

allow rmt block_device:dir search;
allow rmt modem_block_device:blk_file rw_file_perms;

# access to /dev/uio0
allow rmt uio_device:chr_file rw_file_perms;

allow rmt self:socket create_socket_perms;
allowxperm rmt self:socket ioctl msm_sock_ipc_ioctls;

allow rmt debugfs_rmt_storage:dir search;
allow rmt debugfs_rmt_storage:file w_file_perms;

allow rmt sysfs:dir r_dir_perms;
r_dir_file(rmt, sysfs_rmtfs)