blob: 6e37342ac2078896113cc675e0c5f4de99f32352 [file] [log] [blame]
binder_call(rild, mediaserver)
binder_use(rild)
binder_service(rild)
# Grant access to Qualcomm MSM Interface (QMI) radio sockets to RILD
qmux_socket(rild)
allow rild persist_file:dir search;
allow rild persist_modem_file:dir rw_dir_perms;
allow rild persist_modem_file:file create_file_perms;
allow rild time:unix_stream_socket connectto;
allow rild sysfs_capsense_update:file { getattr w_file_perms};
allow rild sysfs_sar_wifi:file { getattr w_file_perms};
allow rild audio_cutback_data_file:dir rw_dir_perms;
allow rild audio_cutback_data_file:sock_file create_file_perms;
# why?
allow rild audio_cutback_data_file:dir setattr;
# rild needs to parse through /proc to obtain pid of netmgrd
r_dir_file(rild, netmgrd)
# b/18352920 suppress denials until the procfs lookup is removed
dontaudit rild domain:dir r_dir_perms;
#allow rild to collect qxdm logs during calls
userdebug_or_eng(`
allow rild shell_exec:file rx_file_perms;
allow rild system_file:file rx_file_perms;
allow rild diag_logs:dir rw_dir_perms;
allow rild diag_logs:file create_file_perms;
')