Files
device_google_wahoo/sepolicy/per_mgr.te
Thierry Strudel 4e18dc435b Import common file from device specific directory
Test: boot, basic functionality
Change-Id: I9c07718b481730c3388f99c5e1eff17c9fd75a7b
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-03-04 23:34:45 -08:00

28 lines
687 B
Plaintext

# Policy for pm-service and pm-proxy
type per_mgr, domain;
type per_mgr_exec, exec_type, file_type;
init_daemon_domain(per_mgr);
add_service(per_mgr, per_mgr_service)
binder_use(per_mgr)
binder_call(per_mgr, per_proxy)
allow per_mgr self:capability net_bind_service;
allow per_mgr firmware_file:file r_file_perms;
allow per_mgr firmware_file:dir search;
allow per_mgr sysfs_msm_subsys:lnk_file r_file_perms;
allow per_mgr sysfs_msm_subsys:dir r_dir_perms;
allow per_mgr self:socket create_socket_perms;
allowxperm per_mgr self:socket ioctl msm_sock_ipc_ioctls;
allow per_mgr ssr_device:chr_file { open read };
r_dir_file(per_mgr, sysfs)
userdebug_or_eng(`
permissive per_mgr;
')