xref: /aosp_15_r20/system/sepolicy/prebuilts/api/29.0/public/radio.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# phone subsystem
2*e4a36f41SAndroid Build Coastguard Workertype radio, domain, mlstrustedsubject;
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Workernet_domain(radio)
5*e4a36f41SAndroid Build Coastguard Workerbluetooth_domain(radio)
6*e4a36f41SAndroid Build Coastguard Workerbinder_service(radio)
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker# Talks to hal_telephony_server via the rild socket only for devices without full treble
9*e4a36f41SAndroid Build Coastguard Workernot_full_treble(`unix_socket_connect(radio, rild, hal_telephony_server)')
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker# Data file accesses.
12*e4a36f41SAndroid Build Coastguard Workerallow radio radio_data_file:dir create_dir_perms;
13*e4a36f41SAndroid Build Coastguard Workerallow radio radio_data_file:notdevfile_class_set create_file_perms;
14*e4a36f41SAndroid Build Coastguard Worker
15*e4a36f41SAndroid Build Coastguard Worker
16*e4a36f41SAndroid Build Coastguard Workerallow radio net_data_file:dir search;
17*e4a36f41SAndroid Build Coastguard Workerallow radio net_data_file:file r_file_perms;
18*e4a36f41SAndroid Build Coastguard Worker
19*e4a36f41SAndroid Build Coastguard Worker# Property service
20*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, radio_prop)
21*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, exported_radio_prop)
22*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, exported2_radio_prop)
23*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, exported3_radio_prop)
24*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, net_radio_prop)
25*e4a36f41SAndroid Build Coastguard Worker
26*e4a36f41SAndroid Build Coastguard Worker# ctl interface
27*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, ctl_rildaemon_prop)
28*e4a36f41SAndroid Build Coastguard Worker
29*e4a36f41SAndroid Build Coastguard Workeradd_service(radio, radio_service)
30*e4a36f41SAndroid Build Coastguard Workerallow radio audioserver_service:service_manager find;
31*e4a36f41SAndroid Build Coastguard Workerallow radio cameraserver_service:service_manager find;
32*e4a36f41SAndroid Build Coastguard Workerallow radio drmserver_service:service_manager find;
33*e4a36f41SAndroid Build Coastguard Workerallow radio mediaserver_service:service_manager find;
34*e4a36f41SAndroid Build Coastguard Workerallow radio nfc_service:service_manager find;
35*e4a36f41SAndroid Build Coastguard Workerallow radio app_api_service:service_manager find;
36*e4a36f41SAndroid Build Coastguard Workerallow radio system_api_service:service_manager find;
37*e4a36f41SAndroid Build Coastguard Workerallow radio timedetector_service:service_manager find;
38*e4a36f41SAndroid Build Coastguard Worker
39*e4a36f41SAndroid Build Coastguard Worker# Perform HwBinder IPC.
40*e4a36f41SAndroid Build Coastguard Workerhwbinder_use(radio)
41*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(radio, hal_telephony)
42*e4a36f41SAndroid Build Coastguard Worker
43*e4a36f41SAndroid Build Coastguard Worker# Used by TelephonyManager
44*e4a36f41SAndroid Build Coastguard Workerallow radio proc_cmdline:file r_file_perms;
45