1type rfs_access, domain;
2type rfs_access_exec, exec_type, vendor_file_type, file_type;
3init_daemon_domain(rfs_access)
4
5allow rfs_access mnt_vendor_file:dir search;
6allow rfs_access mpss_rfs_data_file:dir create_dir_perms;
7allow rfs_access mpss_rfs_data_file:file create_file_perms;
8allow rfs_access persist_file:dir search;
9allow rfs_access persist_rfs_file:dir create_dir_perms;
10allow rfs_access persist_rfs_file:file create_file_perms;
11allow rfs_access persist_rfs_shared_hlos_file:dir create_dir_perms;
12allow rfs_access rfs_tombstone_data_file:dir create_dir_perms;
13allow rfs_access rfs_tombstone_data_file:file create_file_perms;
14allow rfs_access self:capability { setuid setgid chown setpcap };
15allow rfs_access self:qipcrtr_socket create_socket_perms_no_ioctl;
16
17wakelock_use(rfs_access)
18
19dontaudit rfs_access self:capability { dac_override dac_read_search };
20