1#integrated sensor process 2type ims, domain, vendor_executes_system_violators; 3type ims_exec, exec_type, vendor_file_type, file_type; 4 5allow ims self:capability net_bind_service; 6 7# Started by init 8init_daemon_domain(ims) 9net_domain(ims) 10 11# TODO(b/36657020): Removed this once ims no longer needs access to /dev/binder 12typeattribute ims binder_in_vendor_violators; 13 14# Grant access to Qualcomm MSM Interface (QMI) radio sockets 15qmux_socket(ims) 16 17# talk to netmgrd and cnd 18allow ims netmgrd_socket:dir search; 19unix_socket_connect(ims, netmgrd, netmgrd) 20unix_socket_connect(ims, cnd, cnd) 21set_prop(ims, system_prop) 22 23# files in /sys 24r_dir_file(ims, sysfs_type) 25 26# additional socket perms 27allow ims ims_socket:sock_file write; 28allow ims self:netlink_socket create_socket_perms_no_ioctl; 29allow ims self:socket create_socket_perms; 30allowxperm ims self:udp_socket ioctl RMNET_IOCTL_EXTENDED; 31allowxperm ims self:socket ioctl msm_sock_ipc_ioctls; 32 33userdebug_or_eng(` 34 allow ims diag_device:chr_file rw_file_perms; 35') 36dontaudit ims diag_device:chr_file rw_file_perms; 37 38# Runs /system/bin/sh for executing ndc commands via popen 39allow ims shell_exec:file rx_file_perms; 40allow ims system_file:file rx_file_perms; 41 42# use /dev/ion memory 43allow ims ion_device:chr_file r_file_perms; 44 45# use fds passed from radio app 46allow ims radio:fd use; 47