1# init runs /system/bin/touchfwup.sh which runs rmi4update 2type rmi4update, domain, domain_deprecated; 3type rmi4update_exec, exec_type, file_type; 4 5init_daemon_domain(rmi4update) 6 7# access to /dev/hidraw0 8allow rmi4update hidraw_device:chr_file rw_file_perms; 9 10# TODO give the files being access a more specific label. 11allow rmi4update sysfs:dir search; 12allow rmi4update sysfs:file rw_file_perms; 13 14# Allow rmi4update to use file descriptor passed from touchfwup.sh 15allow rmi4update touch_fw_update:fd use; 16 17# Allow rmi4update to getattr and append to log file. 18allow rmi4update touch_fw_update_log_file:file { getattr append }; 19