| # Policy for /system/bin/qmuxd |
| type qmuxd, domain; |
| type qmuxd_exec, exec_type, vendor_file_type, file_type; |
| |
| init_daemon_domain(qmuxd) |
| |
| allow qmuxd qmuxd_socket:dir w_dir_perms; |
| allow qmuxd qmuxd_socket:sock_file create_file_perms; |
| allow qmuxd self:socket create_socket_perms_no_ioctl; |
| |
| # TODO(b/34274385): Remove this once HALs are guaranteed to not be run in passthrough mode |
| # What's going on here is that Camera HAL is talking over sockets to qmuxd, which is permitted. |
| # However, those rules target hal_camera rather than hal_camera_server and thus are also |
| # granted to all clients of these HALs (e.g., cameraserver) which are core components, and |
| # socket communications between system components and vendor components are not permted. |
| # Once we switch full Treble devices to binderized only mode, this issue will disappear. |
| typeattribute qmuxd socket_between_core_and_vendor_violators; |
