| |
| type tcmd, domain, device_domain_deprecated; |
| type tcmd_exec, exec_type, file_type; |
| |
| init_daemon_domain(tcmd) |
| |
| # Uses network sockets. |
| net_domain(tcmd) |
| |
| # Allow restart, fastboot, power off |
| set_prop(tcmd, powerctl_prop) |
| |
| # Uses /dev/ttydiag2 |
| allow tcmd diag_device:chr_file rw_file_perms; |
| |
| # Uses raw socket |
| allow tcmd self:capability net_raw; |
| |
| # To allow read telephony.db |
| allow tcmd radio_data_file:dir r_dir_perms; |
| allow tcmd radio_data_file:file r_file_perms; |
| |
| # To allow read/write /persist |
| allow tcmd persist_file:dir search; |
| allow tcmd persist_hiddenmenu_file:dir rw_dir_perms; |
| allow tcmd persist_hiddenmenu_file:file create_file_perms; |
