1type rmt_storage, domain; 2type rmt_storage_exec, exec_type, vendor_file_type, file_type; 3 4init_daemon_domain(rmt_storage) 5 6wakelock_use(rmt_storage) 7 8allow rmt_storage self:capability { net_bind_service setgid setpcap setuid }; 9 10allow rmt_storage modem_block_device:blk_file rw_file_perms; 11allow rmt_storage uio_device:chr_file rw_file_perms; 12allow rmt_storage block_device:dir search; 13 14allow rmt_storage sysfs_uio:dir r_dir_perms; 15allow rmt_storage sysfs_uio:lnk_file r_file_perms; 16 17allow rmt_storage sysfs_rmtfs:dir search; 18allow rmt_storage sysfs_rmtfs:file r_file_perms; 19allow rmt_storage sysfs_rmtfs:dir search; 20 21allow rmt_storage debugfs_rmt_storage:dir search; 22allow rmt_storage debugfs_rmt_storage:file w_file_perms; 23 24allow rmt_storage self:socket create_socket_perms; 25allowxperm rmt_storage self:socket ioctl IPC_ROUTER_IOCTL_BIND_CONTROL_PORT; 26