sepolicy/uim.te


1
2
3
4
5
6
7
8
9
10
11
12
13

type uim, domain;

rw_dir_file(uim, sysfs)
rw_dir_file(uim, brcm_ldisc_sysfs)
rw_dir_file(uim, bluetooth_data_file)
rw_dir_file(uim, sysfs_bluetooth_writable)
allow uim brcm_uim_exec:file { entrypoint getattr read execute };
allow uim hci_attach_dev:chr_file { read write ioctl open };
allow uim self:capability { net_admin dac_override };
allow uim rootfs:lnk_file getattr;
allow uim ta_data_file:dir search;
allow uim bluetooth_prop:sock_file write;
allow uim ta_data_file:file r_file_perms;