blob: b8f121cda7feada7bdc7b5f0a9dd53820bc5c398 [file] [log] [blame]
# goldfish-setup service: runs script
type goldfish_setup, domain, domain_deprecated;
type goldfish_setup_exec, exec_type, file_type;
# Inherit open file to shell (interpreter) for script.
allow goldfish_setup shell_exec:file rx_file_perms;
# Run ifconfig, route commands to configure interfaces and routes.
allow goldfish_setup system_file:file execute_no_trans;
allow goldfish_setup toolbox_exec:file rx_file_perms;
allow goldfish_setup self:capability { net_admin net_raw };
allow goldfish_setup self:udp_socket create_socket_perms;
# Set net.eth0.dns*, debug.sf.nobootanimation
set_prop(goldfish_setup, system_prop)
set_prop(goldfish_setup, debug_prop)
# Set
set_prop(goldfish_setup, radio_noril_prop)
# Stop ril-daemon service (by setting ctl.stop to ril-daemon, which
# transforms to a permission check on
set_prop(goldfish_setup, ctl_rildaemon_prop)