type radio_block_device, dev_type;
type sec_efs_block_device, dev_type;
+type drb_device, dev_type;
type fp_sensor_device, dev_type;
type io_device, dev_type;
type ssp_device, dev_type;
type conn_vendor_data_file, file_type, data_file_type;
type log_vendor_data_file, file_type, data_file_type;
type log_cbd_vendor_data_file, file_type, data_file_type;
+type radio_vendor_data_file, file_type, data_file_type;
type wifi_vendor_data_file, file_type, data_file_type;
# EFS
/data/vendor/wifi(/.*)? u:object_r:wifi_vendor_data_file:s0
/data/vendor/log(/.*)? u:object_r:log_vendor_data_file:s0
/data/vendor/log/cbd(/.*)? u:object_r:log_cbd_vendor_data_file:s0
+/data/vendor/secradio(/.*)? u:object_r:radio_vendor_data_file:s0
### DEV
/dev/block/platform/.+/by-name/cache u:object_r:cache_block_device:s0
/dev/batch_io u:object_r:io_device:s0
/dev/ssp_sensorhub u:object_r:ssp_device:s0
+### radio
+# DRB
+/dev/drb u:object_r:drb_device:s0
+
+# UMTS
/dev/umts_boot0 u:object_r:vendor_radio_device:s0
/dev/umts_cass u:object_r:vendor_radio_device:s0
/dev/umts_ipc[0-1] u:object_r:vendor_radio_device:s0
--- /dev/null
+# rild.te
+
+allow rild block_device:dir search;
+allow rild mnt_vendor_file:dir { getattr search };
+
+# audio hal
+allow rild hal_audio_default:dir search;
+allow rild hal_audio_default:file r_file_perms;
+
+# gps
+allow rild gpsd:dir search;
+allow rild gpsd:file r_file_perms;
+
+# /data
+allow rild system_data_file:dir getattr;
+
+# /data/vendor/log
+allow rild log_vendor_data_file:dir rw_dir_perms;
+allow rild log_vendor_data_file:file create_file_perms;
+
+# /dev/block/platform/.+/by-name/radio
+allow rild radio_block_device:blk_file r_file_perms;
+
+# /dev/drb
+allow rild drb_device:chr_file rw_file_perms;
+
+# /dev/umts_*
+# /dev/umts_ipc*
+allow rild vendor_radio_device:chr_file rw_file_perms;
+
+# /data/vendor/secradio
+allow rild radio_vendor_data_file:dir rw_dir_perms;
+allow rild radio_vendor_data_file:file create_file_perms;
+
+# /efs/FactoryApp/
+# /mnt/vendor/efs/root
+allow rild app_efs_file:dir r_dir_perms;
+allow rild app_efs_file:file { rw_file_perms setattr };
+
+# /efs/imei
+allow rild imei_efs_file:dir r_dir_perms;
+allow rild imei_efs_file:file r_file_perms;
+
+# /mnt/vendor/efs/
+allow rild prov_efs_file:dir r_dir_perms;
+allow rild prov_efs_file:file r_file_perms;
+
+# /mnt/vendor/efs/nv_data.bin
+allow rild bin_nv_data_efs_file:file { rw_file_perms setattr unlink };
+
+# /proc/net/xt_qtaguid/iface_stat_fmt
+allow rild proc_qtaguid_stat:file r_file_perms;
+
+# /proc/sys/net/ipv6/conf/*/accept_ra_defrtr
+allow rild proc_net:file rw_file_perms;
+
+# mdc.
+# persist.sys.omc_support
+# ro.csc.
+get_prop(rild, exported_config_prop);
+
+# ro.boot.cpboot, ril.NwNmId[0-9]
+get_prop(rild, exported_radio_prop)
+
+# vendor.cbd.
+set_prop(rild, vendor_cbd_prop)