1# phone subsystem 2type radio, domain, domain_deprecated, mlstrustedsubject; 3app_domain(radio) 4net_domain(radio) 5bluetooth_domain(radio) 6binder_service(radio) 7 8# Talks to rild via the rild socket. 9unix_socket_connect(radio, rild, rild) 10 11# Data file accesses. 12allow radio radio_data_file:dir create_dir_perms; 13allow radio radio_data_file:notdevfile_class_set create_file_perms; 14 15allow radio alarm_device:chr_file rw_file_perms; 16 17allow radio net_data_file:dir search; 18allow radio net_data_file:file r_file_perms; 19 20# Property service 21set_prop(radio, radio_prop) 22set_prop(radio, system_radio_prop) 23set_prop(radio, net_radio_prop) 24auditallow radio net_radio_prop:property_service set; 25auditallow radio system_radio_prop:property_service set; 26 27# ctl interface 28set_prop(radio, ctl_rildaemon_prop) 29 30allow radio audioserver_service:service_manager find; 31allow radio cameraserver_service:service_manager find; 32allow radio drmserver_service:service_manager find; 33allow radio mediaserver_service:service_manager find; 34allow radio nfc_service:service_manager find; 35allow radio radio_service:service_manager { add find }; 36allow radio surfaceflinger_service:service_manager find; 37allow radio app_api_service:service_manager find; 38allow radio system_api_service:service_manager find; 39