1# phone subsystem
2type radio, domain, mlstrustedsubject;
3app_domain(radio)
4net_domain(radio)
5bluetooth_domain(radio)
6binder_service(radio)
7
8# Talks to rild via the rild socket.
9unix_socket_connect(radio, rild, rild)
10
11# Data file accesses.
12allow radio radio_data_file:dir create_dir_perms;
13allow radio radio_data_file:notdevfile_class_set create_file_perms;
14
15allow radio alarm_device:chr_file rw_file_perms;
16
17allow radio net_data_file:dir search;
18allow radio net_data_file:file r_file_perms;
19
20# Property service
21set_prop(radio, radio_prop)
22set_prop(radio, system_radio_prop)
23set_prop(radio, net_radio_prop)
24auditallow radio net_radio_prop:property_service set;
25auditallow radio system_radio_prop:property_service set;
26
27# ctl interface
28set_prop(radio, ctl_rildaemon_prop)
29
30allow radio drmserver_service:service_manager find;
31allow radio mediaserver_service:service_manager find;
32allow radio radio_service:service_manager { add find };
33allow radio surfaceflinger_service:service_manager find;
34allow radio app_api_service:service_manager find;
35allow radio system_api_service:service_manager find;
36