Gitiles
Code Review Sign In
gerrit.twrp.me / android_device_samsung_j5lte / 3927d123a06cefd5b3f641a2d23bcb3ec06b36f0 / . / sepolicy / smdexe.te
blob: 65e387d87a4eb810e163d4a22b714cfd5de17071 [file] [log] [blame]
Zvikomborero VIncent Zvikaramba3927d122016-08-21 22:49:17 -0400[diff] [blame^]1#============smdexe============
2type smdexe, domain;
3type smdexe_exec, exec_type, file_type;
4init_daemon_domain(smdexe)
5net_domain(smdexe)
6
7# To make VT call
8binder_use(smdexe)
9
10allow smdexe ddexe:unix_stream_socket connectto;
11allow smdexe dun_device:chr_file { read lock getattr write ioctl open append };
12allow smdexe init:process sigchld;
13allow smdexe rild:unix_stream_socket connectto;
14allow smdexe smd_device:chr_file { read lock getattr write ioctl open append };
15allow smdexe smdexe:appletalk_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
16allow smdexe smdexe:capability { setuid sys_nice dac_override };
17allow smdexe smdexe:dir { read search ioctl open getattr };
18allow smdexe smdexe:fd use;
19allow smdexe smdexe:fifo_file { read lock getattr write ioctl open append };
20allow smdexe smdexe:file { read lock getattr write ioctl open append };
21allow smdexe smdexe:ipc { unix_read setattr associate read create write getattr unix_write destroy };
22allow smdexe smdexe:key { search setattr read create write link view };
23allow smdexe smdexe:key_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
24allow smdexe smdexe:lnk_file { read lock ioctl open getattr };
25allow smdexe smdexe:msg { receive send };
26allow smdexe smdexe:msgq { unix_read setattr associate read create write enqueue getattr unix_write destroy };
27allow smdexe smdexe:netlink_route_socket { nlmsg_write lock accept connect shutdown append create nlmsg_read write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
28allow smdexe smdexe:netlink_selinux_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
29allow smdexe smdexe:packet_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
30allow smdexe smdexe:process { sigkill share getpgid signull setkeycreate siginh getattr setcurrent setrlimit rlimitinh fork getsession setexec setpgid setsched sigstop ptrace noatsecure setsockcreate setfscreate execheap sigchld execstack signal transition setcap execmem getcap getsched dyntransition };
31allow smdexe smdexe:rawip_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto node_bind };
32allow smdexe smdexe:sem { unix_read setattr associate read create write getattr unix_write destroy };
33allow smdexe smdexe:shm { unix_read setattr associate read lock create write getattr unix_write destroy };
34allow smdexe smdexe:socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
35allow smdexe smdexe:tcp_socket { lock accept connect shutdown append connectto create write relabelfrom getattr getopt listen acceptfrom setopt read newconn ioctl recv_msg name_bind name_connect send_msg setattr bind recvfrom sendto relabelto node_bind };
36allow smdexe smdexe:tun_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read attach_queue ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
37allow smdexe smdexe:udp_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto node_bind };
38allow smdexe smdexe:unix_dgram_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
39allow smdexe smdexe:unix_stream_socket { lock accept connect shutdown append connectto create write relabelfrom getattr getopt listen acceptfrom setopt read newconn ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
40allow smdexe smdexe_exec:file { read open getattr entrypoint execute };
41allow smdexe smdexe_tmpfs:file { read write };
42allow smdexe sysfs:file { read lock getattr write ioctl open append };
43allow smdexe sysfs_ss_writable:file { read lock getattr write ioctl open append };
44allow smdexe system_data_file:sock_file { read lock getattr write ioctl open append };