| # Grant access to Qualcomm MSM Interface (QMI) radio sockets to system services |
| # (e.g., LocationManager) |
| qmux_socket(system_server) |
| |
| allow system_server self:netlink_socket create_socket_perms_no_ioctl; |
| |
| allow system_server per_mgr_service:service_manager find; |
| |
| # Fingerprint access |
| allow system_server fingerprint_device:chr_file rw_file_perms; |
| |
| #Needed by libmdmdetect to get subsystem info and to check their states |
| allow system_server sysfs_ssr:dir r_dir_perms; |
| allow system_server sysfs_ssr:lnk_file r_file_perms; |
| |
| # Needed by hubconnection for sensor hub |
| allow system_server sensors_device:chr_file rw_file_perms; |
| allow system_server uhid_device:chr_file rw_file_perms; |
| allow system_server persist_file:dir search; |
| allow system_server persist_sensortool_file:file r_file_perms; |
| |
| # talk to perfd |
| allow system_server perfd_data_file:dir search; |
| allow system_server perfd_data_file:sock_file write; |
| allow system_server perfd:unix_stream_socket connectto; |
| |
| # hubconnection to get and set sensors.contexthub.* properties |
| set_prop(system_server, contexthub_prop); |
| |
| # To improve app launch times - we would like to force all tasks to |
| # run on big cores for app launch (sched_boost) - instead of just |
| # boosting them to make it "more likely" to run on big cores. |
| allow system_server zygote:process setsched; |
| |
| allowxperm system_server self:udp_socket ioctl { SIOCSIFFLAGS SIOCDEVPRIVATE_D }; |
| |
| # use MSM ipc router ioctls |
| allow system_server self:socket ioctl; |
| allowxperm system_server self:socket ioctl msm_sock_ipc_ioctls; |