1type ims, domain; 2type ims_exec, exec_type, vendor_file_type, file_type; 3 4init_daemon_domain(ims) 5net_domain(ims) 6 7get_prop(ims, hwservicemanager_prop) 8set_prop(ims, ims_prop) 9set_prop(ims, ctl_vendor_imsrcsservice_prop) 10get_prop(ims, cnd_prop) 11 12unix_socket_connect(ims, netmgrd, netmgrd) 13 14allow ims sysfs_soc:dir search; 15allow ims sysfs_soc:file r_file_perms; 16allow ims sysfs_timestamp_switch:file r_file_perms; 17 18allow ims self:capability net_bind_service; 19 20userdebug_or_eng(` 21 allow ims diag_device:chr_file rw_file_perms; 22') 23 24allow ims ion_device:chr_file r_file_perms; 25 26unix_socket_connect(ims, cnd, cnd) 27 28allow ims self:socket create_socket_perms; 29allow ims ims_socket:sock_file write; 30allow ims self:netlink_generic_socket create_socket_perms_no_ioctl; 31allow ims netmgrd_socket:dir search; 32allow ims netmgrd_socket:sock_file w_file_perms; 33allow ims radio_vendor_data_file:dir rw_dir_perms; 34allow ims radio_vendor_data_file:file create_file_perms; 35allowxperm ims self:socket ioctl msm_sock_ipc_ioctls; 36allowxperm ims self:udp_socket ioctl RMNET_IOCTL_EXTENDED; 37 38r_dir_file(ims, sysfs_msm_subsys) 39r_dir_file(ims, sysfs_diag) 40 41hwbinder_use(ims) 42allow ims hal_cne_hwservice:hwservice_manager find; 43binder_call(ims, cnd) 44 45dontaudit ims kernel:system module_request; 46 47dontaudit ims diag_device:chr_file rw_file_perms; 48