mirror of
https://github.com/Evolution-X-Devices/device_google_wahoo
synced 2026-02-01 07:50:47 +00:00
Permissive to enforce for ims and cnd domains Introduce new CNE HIDL service Remove CNE talking to cnd via socket and move to HIDL Allow IMS to access sysfs data and diag files Allow radio to access telephony monitor property Bug: 38043081 Change-Id: I1775d6aea4de9843fdbedd06ebd71ec213f38189
32 lines
951 B
Plaintext
32 lines
951 B
Plaintext
type cnd, domain;
|
|
type cnd_exec, exec_type, vendor_file_type, file_type;
|
|
file_type_auto_trans(cnd, socket_device, cnd_socket);
|
|
|
|
# cnd is started by init, type transit from init domain to cnd domain
|
|
init_daemon_domain(cnd)
|
|
|
|
#TODO remove chown fsetid setgid setuid once b/62571088 is resolved
|
|
allow cnd self:capability { chown fsetid setgid setuid net_bind_service };
|
|
|
|
allow cnd self:udp_socket create_socket_perms;
|
|
allowxperm cnd self:udp_socket ioctl SIOCGIFMTU;
|
|
|
|
allow cnd sysfs_timestamp_switch:file r_file_perms;
|
|
r_dir_file(cnd, sysfs_msm_subsys)
|
|
r_dir_file(cnd, sysfs_diag)
|
|
r_dir_file(cnd, sysfs_soc)
|
|
|
|
allow cnd proc_meminfo:file r_file_perms;
|
|
|
|
set_prop(cnd, cnd_prop)
|
|
|
|
allow cnd self:socket create_socket_perms;
|
|
allowxperm cnd self:socket ioctl msm_sock_ipc_ioctls;
|
|
|
|
# To register cnd to hwbinder
|
|
add_hwservice(cnd, hal_cne_hwservice)
|
|
hwbinder_use(cnd)
|
|
get_prop(cnd, hwservicemanager_prop)
|
|
binder_call(cnd, dataservice_app)
|
|
binder_call(cnd, ims)
|