1# kickstart processes and scripts (system process) 2type kickstart, domain; 3type kickstart_exec, file_type, exec_type; 4 5init_daemon_domain(kickstart) 6 7# Spawn /system/bin/efsks and /system/bin/ks 8allow kickstart kickstart_exec:file { open execute_no_trans getattr }; 9 10# Let qcks access /dev/mdm node (modem driver) 11allow kickstart radio_device:chr_file r_file_perms; 12 13# Access USB host ks bridge drivers 14allow kickstart kickstart_device:chr_file rw_file_perms; 15 16# Read and write to /dev/block/mmcblk0p[89] 17allow kickstart efs_block_device:blk_file rw_file_perms; 18allow kickstart block_device:dir { getattr write search }; 19 20# Write contents of block device to kickstart data dir 21allow kickstart kickstart_data_file:file create_file_perms; 22allow kickstart kickstart_data_file:dir rw_dir_perms; 23 24# Read radio firmware file(s) 25allow kickstart radio_efs_file:dir search; 26allow kickstart radio_efs_file:file r_file_perms; 27 28# Run dd from toolbox on firmware files 29allow kickstart shell_exec:file rx_file_perms; 30allow kickstart system_file:file execute_no_trans; 31 32# Wake lock access 33wakelock_use(kickstart) 34 35# Read tombstones 36allow kickstart tombstone_data_file:dir r_dir_perms; 37allow kickstart tombstone_data_file:file r_file_perms; 38 39# Investigate denial on system_data_file:dir. 40allow kickstart system_data_file:dir { write add_name remove_name }; 41auditallow kickstart system_data_file:dir { write add_name remove_name }; 42