xref: /aosp_15_r20/system/sepolicy/prebuilts/api/32.0/private/radio.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute radio coredomain, mlstrustedsubject;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Workerapp_domain(radio)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Workerread_runtime_log_tags(radio)
6*e4a36f41SAndroid Build Coastguard Worker
7*e4a36f41SAndroid Build Coastguard Worker# Property service
8*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, radio_control_prop)
9*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, radio_prop)
10*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, net_radio_prop)
11*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, telephony_status_prop)
12*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, radio_cdma_ecm_prop)
13*e4a36f41SAndroid Build Coastguard Worker
14*e4a36f41SAndroid Build Coastguard Worker# ctl interface
15*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, ctl_rildaemon_prop)
16*e4a36f41SAndroid Build Coastguard Worker
17*e4a36f41SAndroid Build Coastguard Worker# Telephony code contains time / time zone detection logic so it reads the associated properties.
18*e4a36f41SAndroid Build Coastguard Workerget_prop(radio, time_prop)
19*e4a36f41SAndroid Build Coastguard Worker
20*e4a36f41SAndroid Build Coastguard Worker# allow telephony to access platform compat to log permission denials
21*e4a36f41SAndroid Build Coastguard Workerallow radio platform_compat_service:service_manager find;
22*e4a36f41SAndroid Build Coastguard Worker
23*e4a36f41SAndroid Build Coastguard Workerallow radio uce_service:service_manager find;
24*e4a36f41SAndroid Build Coastguard Worker
25*e4a36f41SAndroid Build Coastguard Worker# Manage /data/misc/emergencynumberdb
26*e4a36f41SAndroid Build Coastguard Workerallow radio emergency_data_file:dir r_dir_perms;
27*e4a36f41SAndroid Build Coastguard Workerallow radio emergency_data_file:file r_file_perms;
28*e4a36f41SAndroid Build Coastguard Worker
29*e4a36f41SAndroid Build Coastguard Worker# allow telephony to access related cache properties
30*e4a36f41SAndroid Build Coastguard Workerset_prop(radio, binder_cache_telephony_server_prop);
31*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -radio -init }
32*e4a36f41SAndroid Build Coastguard Worker    binder_cache_telephony_server_prop:property_service set;
33*e4a36f41SAndroid Build Coastguard Worker
34*e4a36f41SAndroid Build Coastguard Worker# allow sending pulled atoms to statsd
35*e4a36f41SAndroid Build Coastguard Workerbinder_call(radio, statsd)
36*e4a36f41SAndroid Build Coastguard Worker
37