1type cbd, domain; 2type cbd_exec, vendor_file_type, exec_type, file_type; 3init_daemon_domain(cbd) 4 5set_prop(cbd, vendor_modem_prop) 6set_prop(cbd, vendor_cbd_prop) 7set_prop(cbd, vendor_rild_prop) 8 9allow cbd mnt_vendor_file:dir r_dir_perms; 10 11allow cbd kmsg_device:chr_file rw_file_perms; 12 13allow cbd vendor_shell_exec:file execute_no_trans; 14allow cbd vendor_toolbox_exec:file execute_no_trans; 15 16# Allow cbd to access modem block device 17allow cbd block_device:dir search; 18allow cbd modem_block_device:blk_file r_file_perms; 19 20# Allow cbd to access sysfs chosen files 21allow cbd sysfs_chosen:file r_file_perms; 22allow cbd sysfs_chosen:dir r_dir_perms; 23 24allow cbd radio_device:chr_file rw_file_perms; 25 26allow cbd proc_cmdline:file r_file_perms; 27 28allow cbd persist_modem_file:dir create_dir_perms; 29allow cbd persist_modem_file:file create_file_perms; 30allow cbd persist_file:dir search; 31 32allow cbd radio_vendor_data_file:dir create_dir_perms; 33allow cbd radio_vendor_data_file:file create_file_perms; 34 35# Allow cbd to operate with modem EFS file/dir 36allow cbd modem_efs_file:dir create_dir_perms; 37allow cbd modem_efs_file:file create_file_perms; 38 39# Allow cbd to operate with modem userdata file/dir 40allow cbd modem_userdata_file:dir create_dir_perms; 41allow cbd modem_userdata_file:file create_file_perms; 42 43# Allow cbd to access modem image file/dir 44allow cbd modem_img_file:dir r_dir_perms; 45allow cbd modem_img_file:file r_file_perms; 46allow cbd modem_img_file:lnk_file r_file_perms; 47 48# Allow cbd to collect crash info 49allow cbd sscoredump_vendor_data_crashinfo_file:dir create_dir_perms; 50allow cbd sscoredump_vendor_data_crashinfo_file:file create_file_perms; 51 52userdebug_or_eng(` 53 r_dir_file(cbd, vendor_slog_file) 54 55 allow cbd kernel:system syslog_read; 56 57 allow cbd sscoredump_vendor_data_coredump_file:dir create_dir_perms; 58 allow cbd sscoredump_vendor_data_coredump_file:file create_file_perms; 59') 60 61