xref: /aosp_15_r20/system/sepolicy/prebuilts/api/32.0/public/radio.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# phone subsystem
2*e4a36f41SAndroid Build Coastguard Workertype radio, domain, mlstrustedsubject;
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Workernet_domain(radio)
5*e4a36f41SAndroid Build Coastguard Workerbluetooth_domain(radio)
6*e4a36f41SAndroid Build Coastguard Workerbinder_service(radio)
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker# Talks to hal_telephony_server via the rild socket only for devices without full treble
9*e4a36f41SAndroid Build Coastguard Workernot_full_treble(`unix_socket_connect(radio, rild, hal_telephony_server)')
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker# Data file accesses.
12*e4a36f41SAndroid Build Coastguard Workerallow radio radio_data_file:dir create_dir_perms;
13*e4a36f41SAndroid Build Coastguard Workerallow radio radio_data_file:notdevfile_class_set create_file_perms;
14*e4a36f41SAndroid Build Coastguard Workerallow radio radio_core_data_file:dir r_dir_perms;
15*e4a36f41SAndroid Build Coastguard Workerallow radio radio_core_data_file:file r_file_perms;
16*e4a36f41SAndroid Build Coastguard Worker
17*e4a36f41SAndroid Build Coastguard Workerallow radio net_data_file:dir search;
18*e4a36f41SAndroid Build Coastguard Workerallow radio net_data_file:file r_file_perms;
19*e4a36f41SAndroid Build Coastguard Worker
20*e4a36f41SAndroid Build Coastguard Workeradd_service(radio, radio_service)
21*e4a36f41SAndroid Build Coastguard Workerallow radio audioserver_service:service_manager find;
22*e4a36f41SAndroid Build Coastguard Workerallow radio cameraserver_service:service_manager find;
23*e4a36f41SAndroid Build Coastguard Workerallow radio drmserver_service:service_manager find;
24*e4a36f41SAndroid Build Coastguard Workerallow radio mediaserver_service:service_manager find;
25*e4a36f41SAndroid Build Coastguard Workerallow radio nfc_service:service_manager find;
26*e4a36f41SAndroid Build Coastguard Workerallow radio app_api_service:service_manager find;
27*e4a36f41SAndroid Build Coastguard Workerallow radio system_api_service:service_manager find;
28*e4a36f41SAndroid Build Coastguard Workerallow radio timedetector_service:service_manager find;
29*e4a36f41SAndroid Build Coastguard Workerallow radio timezonedetector_service:service_manager find;
30*e4a36f41SAndroid Build Coastguard Worker
31*e4a36f41SAndroid Build Coastguard Worker# Perform HwBinder IPC.
32*e4a36f41SAndroid Build Coastguard Workerhwbinder_use(radio)
33*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(radio, hal_telephony)
34*e4a36f41SAndroid Build Coastguard Worker
35*e4a36f41SAndroid Build Coastguard Worker# Used by TelephonyManager
36*e4a36f41SAndroid Build Coastguard Workerallow radio proc_cmdline:file r_file_perms;
37