sepolicy/mnld.te

   1 type mnld_exec, exec_type, file_type;
   2 type mnld, domain, domain_deprecated;
   3
   4 init_daemon_domain(mnld)
   5 net_domain(mnld)
   6
   7 allow mnld gps_device:chr_file rw_file_perms;
   8 allow mnld stpgps_device:chr_file rw_file_perms;
   9
  10 allow mnld gps_data_file:dir create_dir_perms;
  11 allow mnld gps_data_file:file create_file_perms;
  12
  13 allow mnld agpsd_data_file:dir create_dir_perms;
  14 allow mnld agpsd_data_file:sock_file create_file_perms;
  15 allow mnld mtk_agpsd:unix_dgram_socket sendto;
  16
  17 allow mnld mnld_data_file:dir rw_dir_perms;
  18 allow mnld mnld_data_file:sock_file create_file_perms;
  19 allow mnld mnld_data_file:file create_file_perms;
  20
  21 allow mnld nvdata_file:dir rw_dir_perms;
  22 allow mnld nvdata_file:file create_file_perms;
  23 allow mnld nvdata_file:lnk_file r_file_perms;
  24 allow mnld nvram_device:blk_file rw_file_perms;
  25
  26 allow mnld sysfs_gps_file:dir search;
  27 allow mnld sysfs_gps_file:file rw_file_perms;
  28
  29 allow mnld mnld_prop:property_service set;
  30 allow mnld property_socket:sock_file write;
  31
  32 allow mnld init:unix_stream_socket connectto;
  33 allow mnld system_server:unix_dgram_socket { sendto write };
  34
  35 allow mnld fuse:dir create_dir_perms;
  36 allow mnld fuse:file create_file_perms;
  37
  38 allow mnld storage_file:dir search;
  39 allow mnld storage_file:lnk_file read;
  40
  41 allow mnld mdlog_device:chr_file { read write };
  42
  43 allow mnld block_device:dir search;
  44
  45 file_type_auto_trans(mnld,system_data_file,mnld_data_file);
  46 file_type_auto_trans(mnld,apk_data_file,mnld_data_file);
  47
  48
  49 allow mnld nvram_device:chr_file { read write open ioctl };
  50 allow mnld mmc_device:blk_file { read write open };
  51 allow mnld sysfs_boot_mode:file { read open };
  52 allow mnld system_data_file:dir { remove_name };
  53 allow mnld system_data_file:file { open };