type liboemservice_proxy_default, domain; type liboemservice_proxy_default_exec, vendor_file_type, exec_type, file_type; init_daemon_domain(liboemservice_proxy_default) # Allow proxy to register as android service. binder_use(liboemservice_proxy_default); add_service(liboemservice_proxy_default, liboemservice_proxy_service); get_prop(liboemservice_proxy_default, hwservicemanager_prop) binder_call(liboemservice_proxy_default, hwservicemanager) binder_call(liboemservice_proxy_default, dmd) allow liboemservice_proxy_default hal_vendor_oem_hwservice:hwservice_manager find; allow liboemservice_proxy_default radio_vendor_data_file:dir create_dir_perms; allow liboemservice_proxy_default radio_vendor_data_file:file create_file_perms; # Grant to access serial device for external logging tool allow liboemservice_proxy_default serial_device:chr_file rw_file_perms; # Grant to access radio device allow liboemservice_proxy_default radio_device:chr_file rw_file_perms; # Grant to access slog dir/file allow liboemservice_proxy_default vendor_slog_file:dir create_dir_perms; allow liboemservice_proxy_default vendor_slog_file:file create_file_perms; # Grant to access tcp socket allow liboemservice_proxy_default node:tcp_socket node_bind; allow liboemservice_proxy_default self:tcp_socket { create_socket_perms_no_ioctl listen accept bind }; # Grant to access log related properties set_prop(liboemservice_proxy_default, vendor_diag_prop) set_prop(liboemservice_proxy_default, vendor_slog_prop) set_prop(liboemservice_proxy_default, vendor_modem_prop) get_prop(liboemservice_proxy_default, vendor_persist_config_default_prop)