android_device_asus_flo/sepolicy/system_server.te

36 lines
1.4 KiB
Plaintext

# Grant access to Qualcomm MSM Interface (QMI) radio sockets to system services
# (e.g., LocationManager)
qmux_socket(system_server)
# PowerManagerService access to sensors socket
unix_socket_connect(system_server, sensors, sensors)
unix_socket_send(system_server, sensors, sensors)
allow system_server sensors:unix_stream_socket sendto;
allow system_server sensors_socket:sock_file r_file_perms;
allow system_server sensors_socket:dir r_dir_perms;
allow system_server persist_file:dir r_dir_perms;
allow system_server sensors_device:chr_file rw_file_perms;
allow system_server proc_last_kmsg:file r_file_perms;
# mpdecision socket access
unix_socket_connect(system_server, mpdecision, mpdecision)
unix_socket_send(system_server, mpdecision, mpdecision)
allow system_server mpdecision:unix_stream_socket sendto;
allow system_server mpdecision_socket:dir search;
# use MSM ipc router ioctls
allow system_server self:socket ioctl;
allowxperm system_server self:socket ioctl msm_sock_ipc_ioctls;
allow system_server sensors_data_file:dir search;
allow system_server sensors_data_file:dir r_file_perms;
allow system_server sensors_socket:sock_file getattr;
allow system_server thermal_service:service_manager find;
get_prop(system_server, userspace_reboot_exported_prop);
get_prop(system_server, userspace_reboot_config_prop);
get_prop(system_server, exported_camera_prop);
get_prop(system_server, vendor_security_patch_level_prop);