blob: 2b619303ab98531a054aadf29b6dc7c0eff4a145 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
|
init_daemon_domain(credmgrd)
allow credmgrd credmgrd_socket:dir rw_dir_perms;
allow credmgrd credmgrd_socket:sock_file create_file_perms;
allow credmgrd firmware_file:dir search;
allow credmgrd firmware_file:file r_file_perms;
allow credmgrd ion_device:chr_file rw_file_perms;
allow credmgrd tad:unix_stream_socket connectto;
allow credmgrd tad_socket:sock_file rw_file_perms;
allow credmgrd tee_device:chr_file rw_file_perms;
allow credmgrd vendor_toolbox_exec:file rx_file_perms;
allow credmgrd cache_file:dir create_dir_perms;
allow credmgrd cache_file:file create_file_perms;
# Needed to create /data/credmgr
allow credmgrd system_data_root_file:dir { create_dir_perms relabelfrom };
allow credmgrd credmgrd_data_file:dir { create_dir_perms relabelto };
allow credmgrd credmgrd_data_file:file create_file_perms;
set_prop(credmgrd, credmgrd_prop)
|
