1# Network utilities (radio process) 2type netmgrd, domain, device_domain_deprecated; 3type netmgrd_exec, exec_type, file_type; 4 5# Started by init 6init_daemon_domain(netmgrd) 7 8net_domain(netmgrd) 9allowxperm netmgrd self:udp_socket ioctl priv_sock_ioctls; 10 11allow netmgrd self:capability { setuid setgid net_admin net_raw }; 12dontaudit netmgrd self:capability setpcap; 13 14set_prop(netmgrd, net_radio_prop) 15 16allow netmgrd self:netlink_socket create_socket_perms_no_ioctl; 17allow netmgrd self:netlink_route_socket nlmsg_write; 18allow netmgrd self:netlink_xfrm_socket { create_socket_perms_no_ioctl nlmsg_write nlmsg_read}; 19allow netmgrd self:socket create_socket_perms; 20allowxperm netmgrd self:socket ioctl msm_sock_ipc_ioctls; 21allow netmgrd netd_socket:sock_file w_file_perms; 22allow netmgrd net_data_file:dir r_dir_perms; 23allow netmgrd net_data_file:file r_file_perms; 24 25allow netmgrd shell_exec:file rx_file_perms; 26allow netmgrd system_file:file rx_file_perms; 27allow netmgrd vendor_file_type:file rx_file_perms; 28 29allow netmgrd sysfs_msm_subsys:dir r_dir_perms; 30allow netmgrd sysfs_msm_subsys:lnk_file r_file_perms; 31 32# Access to /proc/sys/net/* 33allow netmgrd proc_net:file rw_file_perms; 34allow netmgrd proc_net:dir r_dir_perms; 35 36qmux_socket(netmgrd) 37 38userdebug_or_eng(` 39 allow netmgrd shared_log_device:chr_file rw_file_perms; 40 allow netmgrd diag_device:chr_file rw_file_perms; 41') 42 43# execute toybox/toolbox 44allow netmgrd toolbox_exec:file rx_file_perms; 45 46#Allow netmgrd to use wakelock 47wakelock_use(netmgrd) 48