sepolicy/addrsetup.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

type addrsetup, domain, domain_deprecated;
type addrsetup_exec, exec_type, file_type;

# Started by init
init_daemon_domain(addrsetup)

# Connect to /dev/socket/tad
unix_socket_connect(addrsetup, tad, tad)

allow addrsetup bluetooth_data_file:dir rw_dir_perms;
allow addrsetup bluetooth_data_file:file create_file_perms;

allow addrsetup self:capability dac_override;

allow addrsetup sysfs_addrsetup:file rw_file_perms;

allow addrsetup urandom_device:file read;
allow addrsetup tad_socket:sock_file { write };