type modem_svc, domain;
type modem_svc_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(modem_svc)

allow modem_svc self:capability net_bind_service;
allow modem_svc self:qipcrtr_socket create_socket_perms_no_ioctl;

# For property service
set_prop(modem_svc, vendor_modem_diag_prop)
set_prop(modem_svc, vendor_modem_prop)
get_prop(modem_svc, exported3_radio_prop)
get_prop(modem_svc, vendor_build_type_prop)

# For bugreport collection
userdebug_or_eng(`
  allow modem_svc hal_dumpstate_impl:fd use;
  allow modem_svc dumpstate:fd use;
  allow modem_svc shell_data_file:file write;
')

dontaudit modem_svc sysfs_msm_subsys:dir r_dir_perms;
dontaudit modem_svc sysfs_ssr:file r_file_perms;