1*e4a36f41SAndroid Build Coastguard Worker# Point to Point Protocol daemon 2*e4a36f41SAndroid Build Coastguard Workertype ppp, domain; 3*e4a36f41SAndroid Build Coastguard Workertype ppp_device, dev_type; 4*e4a36f41SAndroid Build Coastguard Workertype ppp_exec, system_file_type, exec_type, file_type; 5*e4a36f41SAndroid Build Coastguard Worker 6*e4a36f41SAndroid Build Coastguard Workernet_domain(ppp) 7*e4a36f41SAndroid Build Coastguard Worker 8*e4a36f41SAndroid Build Coastguard Workerr_dir_file(ppp, proc_net_type) 9*e4a36f41SAndroid Build Coastguard Worker 10*e4a36f41SAndroid Build Coastguard Workerallow ppp mtp:{ socket pppox_socket } rw_socket_perms; 11*e4a36f41SAndroid Build Coastguard Worker 12*e4a36f41SAndroid Build Coastguard Worker# ioctls needed for VPN. 13*e4a36f41SAndroid Build Coastguard Workerallowxperm ppp self:udp_socket ioctl priv_sock_ioctls; 14*e4a36f41SAndroid Build Coastguard Workerallowxperm ppp mtp:{ socket pppox_socket } ioctl ppp_ioctls; 15*e4a36f41SAndroid Build Coastguard Worker 16*e4a36f41SAndroid Build Coastguard Workerallow ppp mtp:unix_dgram_socket rw_socket_perms; 17*e4a36f41SAndroid Build Coastguard Workerallow ppp ppp_device:chr_file rw_file_perms; 18*e4a36f41SAndroid Build Coastguard Workerallow ppp self:global_capability_class_set net_admin; 19*e4a36f41SAndroid Build Coastguard Workerallow ppp system_file:file rx_file_perms; 20*e4a36f41SAndroid Build Coastguard Workernot_full_treble(`allow ppp vendor_file:file rx_file_perms;') 21*e4a36f41SAndroid Build Coastguard Workerallow ppp vpn_data_file:dir w_dir_perms; 22*e4a36f41SAndroid Build Coastguard Workerallow ppp vpn_data_file:file create_file_perms; 23*e4a36f41SAndroid Build Coastguard Workerallow ppp mtp:fd use; 24