sepolicy/rild.te

   1 # Allow rild to change perms
   2 allow rild self:capability chown;
   3
   4 # Allow additiional efs access
   5 allow rild bin_nv_data_efs_file:file create_file_perms;
   6 r_dir_file(rild, imei_efs_file);
   7 r_dir_file(rild, app_efs_file);
   8
   9 # audioserver
  10 r_dir_file(rild, audioserver);
  11
  12 # /dev/mbin0
  13 allow rild block_device:dir r_dir_perms;
  14 allow rild emmcblk_device:blk_file r_file_perms;
  15
  16 # /dev/umts_boot0, /dev/umts_ipc0
  17 allow rild mif_device:chr_file rw_file_perms;
  18
  19 # /sys/devices/virtual/misc/multipdp/waketime
  20 allow rild sysfs_multipdp:file rw_file_perms;
  21
  22 allow rild sysfs_input:file rw_file_perms;
  23
  24 # /proc/sys/net/ipv6/conf/*/accept_ra_defrtr
  25 allow rild proc_net:file rw_file_perms;
  26
  27 r_dir_file(rild, gpsd);
  28
  29 allow rild proc_qtaguid_stat:file r_file_perms;
  30
  31 # rild reads /proc/pid/cmdline of mediaserver
  32 r_dir_file(rild, mediaserver);
  33
  34 # /data/misc/radio/*
  35 allow rild radio_data_file:dir rw_dir_perms;
  36 allow rild radio_data_file:file create_file_perms;
  37 # /data/data/com.android.providers.telephony/databases/telephony.db
  38 allow rild radio_data_file:lnk_file r_file_perms;
  39
  40 # sdcard/SDET_PLMN/input/MNCMCC.txt
  41 allow rild storage_file:dir r_dir_perms;
  42 allow rild storage_file:lnk_file r_file_perms;
  43 allow rild mnt_user_file:dir r_dir_perms;
  44 allow rild mnt_user_file:lnk_file r_file_perms;
  45
  46 # Modem firmware download
  47 allow rild radio_block_device:blk_file r_file_perms;
  48
  49 # persist.ril.modem.board
  50 set_prop(modemloader, radio_prop)
  51
  52 # /dev/knox_kap
  53 allow rild knox_device:chr_file r_file_perms;
  54
  55 # /data/media/0
  56 allow rild media_rw_data_file:dir r_dir_perms;