| # goldfish-system-setup service: runs init.qemu-adb-keys.sh script |
| type goldfish_system_setup, domain, coredomain; |
| type goldfish_system_setup_exec, system_file_type, exec_type, file_type; |
| |
| init_daemon_domain(goldfish_system_setup) |
| |
| allow goldfish_system_setup shell_exec:file { rx_file_perms }; |
| |
| # Allow write to /dev/kmsg |
| allow goldfish_system_setup kmsg_device:chr_file rw_file_perms; |
| |
| # Allow read /data/misc/adb/adb_keys |
| allow goldfish_system_setup adb_keys_file:file r_file_perms; |
| allow goldfish_system_setup adb_keys_file:dir search; |
| |
| # Set qemu.adb.copykey |
| allow goldfish_system_setup toolbox_exec:file { getattr execute read open execute_no_trans map }; |
| set_prop(goldfish_system_setup, vendor_qemu_adb_prop); |
