| type tango_core, domain, coredomain; |
| |
| app_domain(tango_core) |
| #from system/sepolicy/private/untrusted_app.te |
| untrusted_app_domain(tango_core) |
| net_domain(tango_core) |
| bluetooth_domain(tango_core) |
| |
| #from system/sepolicy/private/untrusted_app.te |
| allow tango_core system_server:udp_socket { connect getattr read recvfrom sendto write }; |
| |
| #calibration files |
| allow tango_core persist_file:dir search; |
| allow tango_core persist_sensors_file:dir search; |
| allow tango_core persist_sensors_file:file { getattr open read }; |
| |
| # Allow access to necessary vendor libraries to execute Hexagon code |
| typeattribute tango_core system_executes_vendor_violators; |
| allow tango_core hexagon_halide_file:file { execute read open getattr }; |
| allow tango_core qdsp_device:chr_file { ioctl open read }; |
