Gitiles
Code Review Sign In
gerrit.twrp.me / android_device_samsung_j5lte / 3927d123a06cefd5b3f641a2d23bcb3ec06b36f0 / . / sepolicy / ss_conn_daemon.te
blob: f720ad6abb9c0d91fad9ebf1864cadce2466cff3 [file] [log] [blame]
Zvikomborero VIncent Zvikaramba3927d122016-08-21 22:49:17 -0400[diff] [blame^]1#============ss_conn_daemon=================
2type ss_conn_daemon, domain;
3type ss_conn_daemon_exec, exec_type, file_type;
4init_daemon_domain(ss_conn_daemon)
5net_domain(ss_conn_daemon)
6
7# To make VT call
8binder_use(ss_conn_daemon)
9
10allow ss_conn_daemon init:process sigchld;
11allow ss_conn_daemon node:tcp_socket node_bind;
12allow ss_conn_daemon node:udp_socket node_bind;
13allow ss_conn_daemon port:tcp_socket { name_bind name_connect };
14allow ss_conn_daemon port:udp_socket name_bind;
15allow ss_conn_daemon ss_conn_daemon:appletalk_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
16allow ss_conn_daemon ss_conn_daemon:capability sys_nice;
17allow ss_conn_daemon ss_conn_daemon:dir { read search ioctl open getattr };
18allow ss_conn_daemon ss_conn_daemon:fd use;
19allow ss_conn_daemon ss_conn_daemon:fifo_file { read lock getattr write ioctl open append };
20allow ss_conn_daemon ss_conn_daemon:file { read lock getattr write ioctl open append };
21allow ss_conn_daemon ss_conn_daemon:ipc { unix_read setattr associate read create write getattr unix_write destroy };
22allow ss_conn_daemon ss_conn_daemon:key { search setattr read create write link view };
23allow ss_conn_daemon ss_conn_daemon:key_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
24allow ss_conn_daemon ss_conn_daemon:lnk_file { read lock ioctl open getattr };
25allow ss_conn_daemon ss_conn_daemon:msg { receive send };
26allow ss_conn_daemon ss_conn_daemon:msgq { unix_read setattr associate read create write enqueue getattr unix_write destroy };
27allow ss_conn_daemon ss_conn_daemon:netlink_route_socket { nlmsg_write lock accept connect shutdown append create nlmsg_read write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
28allow ss_conn_daemon ss_conn_daemon:netlink_selinux_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
29allow ss_conn_daemon ss_conn_daemon:packet_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
30allow ss_conn_daemon ss_conn_daemon:process { sigkill share getpgid signull setkeycreate siginh getattr setcurrent setrlimit rlimitinh fork getsession setexec setpgid setsched sigstop ptrace noatsecure setsockcreate setfscreate execheap sigchld execstack signal transition setcap execmem getcap getsched dyntransition };
31allow ss_conn_daemon ss_conn_daemon:rawip_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto node_bind };
32allow ss_conn_daemon ss_conn_daemon:sem { unix_read setattr associate read create write getattr unix_write destroy };
33allow ss_conn_daemon ss_conn_daemon:shm { unix_read setattr associate read lock create write getattr unix_write destroy };
34allow ss_conn_daemon ss_conn_daemon:socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
35allow ss_conn_daemon ss_conn_daemon:tcp_socket { lock accept connect shutdown append connectto create write relabelfrom getattr getopt listen acceptfrom setopt read newconn ioctl recv_msg name_bind name_connect send_msg setattr bind recvfrom sendto relabelto node_bind };
36allow ss_conn_daemon ss_conn_daemon:tun_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read attach_queue ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
37allow ss_conn_daemon ss_conn_daemon:udp_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto node_bind };
38allow ss_conn_daemon ss_conn_daemon:unix_dgram_socket { lock accept connect shutdown append create write relabelfrom getattr getopt listen setopt read ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
39allow ss_conn_daemon ss_conn_daemon:unix_stream_socket { lock accept connect shutdown append connectto create write relabelfrom getattr getopt listen acceptfrom setopt read newconn ioctl recv_msg name_bind send_msg setattr bind recvfrom sendto relabelto };
40allow ss_conn_daemon ss_conn_daemon_exec:file { read open getattr entrypoint execute };
41allow ss_conn_daemon ss_conn_daemon_socket:sock_file { rename setattr read lock create getattr write ioctl link unlink open append };
42allow ss_conn_daemon ss_conn_daemon_tmpfs:file { read write };
43allow ss_conn_daemon system_data_file:dir { rename search setattr read create reparent getattr write ioctl link rmdir remove_name unlink open add_name };
44allow ss_conn_daemon system_data_file:file { rename setattr read lock create getattr write ioctl link unlink open append };
45allow ss_conn_daemon usb_device:chr_file { rename setattr read lock create getattr write ioctl link unlink open append };