android_device_google_lynx/sepolicy/vendor/cnss-daemon.te
Michael Bestas 86c57cf612
Add 'sepolicy/' from tag 'android-15.0.0_r1'
git-subtree-dir: sepolicy
git-subtree-mainline: 02d0587cdd
git-subtree-split: f0aabb085a
Change-Id: I34e37568728d8ef0ad8a4bf39194e60e1e28daad
2024-10-06 23:12:06 +03:00

21 lines
694 B
Plaintext

# cnss-daemon service
type cnss-daemon, domain;
type cnss-daemon_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(cnss-daemon)
net_domain(cnss-daemon)
allow cnss-daemon self:netlink_generic_socket create_socket_perms_no_ioctl;
allow cnss-daemon self:qipcrtr_socket create_socket_perms_no_ioctl;
# /data/vendor/wifi/
allow cnss-daemon vendor_wifi_vendor_data_file:dir create_dir_perms;
allow cnss-daemon vendor_wifi_vendor_data_file:file create_file_perms;
# /proc/sys/net/ipv4/tcp_adv_win_scal
allow cnss-daemon proc_net:file rw_file_perms;
# /sys/class/remoteproc
allow cnss-daemon sysfs_cnss_daemon:dir r_dir_perms;
allow cnss-daemon sysfs_cnss_daemon:file r_file_perms;