Files
device_google_wahoo/sepolicy/init_radio.te
Jeff Vander Stoep 5182fda3a2 Mark vendor components that access core data types
Grant these components a temporary exemption to a neverallow rule
asserting vendor processes may not access core data types outside
/data/vendor.

Bug: 34980020
Test: Build and boot Muskie.
Change-Id: I1e536fb7c09a3a2907d06db8304279551a6de81e
2017-03-28 14:17:44 -07:00

20 lines
613 B
Plaintext

# /system/bin/init.radio.sh
type init_radio, domain;
type init_radio_exec, exec_type, file_type;
init_daemon_domain(init_radio)
allow init_radio shell_exec:file r_file_perms;
allow init_radio toolbox_exec:file rx_file_perms;
# TODO(b/36663092): Remove once init_radio no longer accesses data
# outside /data/vendor. Also, the label cannot be radio_data_file since
# that belongs to the radio app.
typeattribute init_radio coredata_in_vendor_violators;
allow init_radio radio_data_file:dir create_dir_perms;
allow init_radio radio_data_file:file create_file_perms;
userdebug_or_eng(`
permissive init_radio;
')