1# goldfish-setup service: runs init.goldfish.sh script 2type goldfish_setup, domain; 3type goldfish_setup_exec, vendor_file_type, exec_type, file_type; 4 5init_daemon_domain(goldfish_setup) 6 7allow goldfish_setup self:capability { net_admin net_raw }; 8allow goldfish_setup self:udp_socket { create ioctl }; 9allow goldfish_setup vendor_toolbox_exec:file execute_no_trans; 10allowxperm goldfish_setup self:udp_socket ioctl priv_sock_ioctls; 11wakelock_use(goldfish_setup); 12allow goldfish_setup vendor_shell_exec:file { rx_file_perms }; 13