vendor/qcom/common/sensors.te

type sensors, domain;
type sensors_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(sensors)

# Read/write persist partition for sensors registry
allow sensors sensors_persist_file:dir rw_dir_perms;
allow sensors sensors_persist_file:file create_file_perms;
allow sensors sensors_persist_file:fifo_file r_file_perms;
allow sensors persist_file:dir search;

# For sensor factory calibrated registry
allow sensors sensors_persist_file:dir create;
allow sensors persist_sensors_reg_fac_file:dir r_dir_perms;
allow sensors persist_sensors_reg_fac_file:file { unlink r_file_perms };
userdebug_or_eng(`
  allow sensors persist_sensors_reg_fac_file:dir w_dir_perms;
  allow sensors persist_sensors_reg_fac_file:file w_file_perms;
')

allow sensors mnt_vendor_file:dir search;

allow sensors sysfs_soc:dir search;
allow sensors sysfs_soc:file r_file_perms;
r_dir_file(sensors, sysfs_msm_subsys)

allow sensors ion_device:chr_file r_file_perms;

# ALlow for sensor direct report mode
allow sensors qdsp_device:chr_file r_file_perms;

allow sensors sysfs_ssr:file r_file_perms;
allow sensors self:qipcrtr_socket create;

# For QCOM diag port access
userdebug_or_eng(`
  allow sensors diag_device:chr_file rw_file_perms;
')

# Allow to getprop persist.vendor.sys.modem.diag.mdlog
get_prop(sensors, vendor_modem_diag_prop)

wakelock_use(sensors)

allow sensors sensors_vendor_data_file:dir rw_dir_perms;
allow sensors sensors_vendor_data_file:file { create setattr rw_file_perms };