| type init-qcom-devstart-sh, domain; |
| type init-qcom-devstart-sh_exec, exec_type, vendor_file_type, file_type; |
| |
| init_daemon_domain(init-qcom-devstart-sh) |
| |
| # execute vendor_shell |
| allow init-qcom-devstart-sh vendor_shell_exec:file rx_file_perms; |
| # execute toybox/toolbox |
| allow init-qcom-devstart-sh vendor_toolbox_exec:file rx_file_perms; |
| # execute grep |
| allow init-qcom-devstart-sh vendor_file:file rx_file_perms; |
| |
| # Set the sys.qcom.devup property |
| set_prop(init-qcom-devstart-sh, system_prop) |
| |
| # Set boot_adsp and boot_slpi to 1 |
| allow init-qcom-devstart-sh sysfs_msm_subsys:file w_file_perms; |