1type liboemservice_proxy_default, domain; 2type liboemservice_proxy_default_exec, vendor_file_type, exec_type, file_type; 3init_daemon_domain(liboemservice_proxy_default) 4 5# Allow proxy to register as android service. 6binder_use(liboemservice_proxy_default); 7add_service(liboemservice_proxy_default, liboemservice_proxy_service); 8 9get_prop(liboemservice_proxy_default, hwservicemanager_prop) 10binder_call(liboemservice_proxy_default, hwservicemanager) 11binder_call(liboemservice_proxy_default, dmd) 12allow liboemservice_proxy_default hal_vendor_oem_hwservice:hwservice_manager find; 13allow liboemservice_proxy_default radio_vendor_data_file:dir create_dir_perms; 14allow liboemservice_proxy_default radio_vendor_data_file:file create_file_perms; 15 16# Grant to access serial device for external logging tool 17allow liboemservice_proxy_default serial_device:chr_file rw_file_perms; 18 19# Grant to access radio device 20allow liboemservice_proxy_default radio_device:chr_file rw_file_perms; 21 22# Grant to access slog dir/file 23allow liboemservice_proxy_default vendor_slog_file:dir create_dir_perms; 24allow liboemservice_proxy_default vendor_slog_file:file create_file_perms; 25 26# Grant to access tcp socket 27allow liboemservice_proxy_default node:tcp_socket node_bind; 28allow liboemservice_proxy_default self:tcp_socket { create_socket_perms_no_ioctl listen accept bind }; 29 30# Grant to access log related properties 31set_prop(liboemservice_proxy_default, vendor_diag_prop) 32set_prop(liboemservice_proxy_default, vendor_slog_prop) 33set_prop(liboemservice_proxy_default, vendor_modem_prop) 34get_prop(liboemservice_proxy_default, vendor_persist_config_default_prop) 35