30 lines
851 B
Text
Executable file
30 lines
851 B
Text
Executable file
#Policy file for qcom-system-daemon
|
|
#qcomsysd = qcom-system-daemon domain
|
|
type qcomsysd, domain, domain_deprecated;
|
|
type qcomsysd_exec, exec_type, file_type;
|
|
init_daemon_domain(qcomsysd);
|
|
|
|
#Needed for logging
|
|
allow qcomsysd smem_log_device:chr_file rw_file_perms;
|
|
|
|
#Needed to read/write cookies to the misc partition
|
|
allow qcomsysd block_device:dir r_dir_perms;
|
|
allow qcomsysd {
|
|
#Needed to access the bootselect partition
|
|
bootselect_device
|
|
}:blk_file rw_file_perms;
|
|
|
|
#Needed to get image info from socinfo
|
|
r_dir_file(qcomsysd, sysfs_socinfo)
|
|
allow qcomsysd sysfs_socinfo:file w_file_perms;
|
|
|
|
allow qcomsysd self:capability { dac_override sys_boot };
|
|
use_per_mgr(qcomsysd);
|
|
#allow qcomsysd access boot mode switch
|
|
set_prop(qcomsysd, boot_mode_prop)
|
|
|
|
#diag
|
|
userdebug_or_eng(`
|
|
diag_use(qcomsysd)
|
|
allow qcomsysd sysfs:file w_file_perms;
|
|
')
|