sepolicy/system_app.te

unix_socket_connect(system_app, cnd, cnd)
allow system_app time:unix_stream_socket connectto;
allow system_app oem_qmi_server:unix_stream_socket connectto;

set_prop(system_app, ctl_ppd_prop)

allow system_app atfwd_service:service_manager add;