1# Network utilities (radio process)
2type netmgrd, domain, device_domain_deprecated;
3type netmgrd_exec, exec_type, file_type;
4
5# Started by init
6init_daemon_domain(netmgrd)
7
8net_domain(netmgrd)
9allowxperm netmgrd self:udp_socket ioctl priv_sock_ioctls;
10
11allow netmgrd self:capability { setuid setgid net_admin net_raw };
12dontaudit netmgrd self:capability setpcap;
13
14set_prop(netmgrd, net_radio_prop)
15
16allow netmgrd self:netlink_socket create_socket_perms_no_ioctl;
17allow netmgrd self:netlink_route_socket nlmsg_write;
18allow netmgrd self:netlink_xfrm_socket { create_socket_perms_no_ioctl nlmsg_write nlmsg_read};
19allow netmgrd self:socket create_socket_perms;
20allowxperm netmgrd self:socket ioctl msm_sock_ipc_ioctls;
21allow netmgrd netd_socket:sock_file w_file_perms;
22allow netmgrd net_data_file:dir r_dir_perms;
23allow netmgrd net_data_file:file r_file_perms;
24
25allow netmgrd shell_exec:file rx_file_perms;
26allow netmgrd system_file:file rx_file_perms;
27allow netmgrd vendor_file_type:file rx_file_perms;
28
29allow netmgrd sysfs_msm_subsys:dir r_dir_perms;
30allow netmgrd sysfs_msm_subsys:lnk_file r_file_perms;
31
32# Access to /proc/sys/net/*
33allow netmgrd proc_net:file rw_file_perms;
34allow netmgrd proc_net:dir r_dir_perms;
35
36qmux_socket(netmgrd)
37
38userdebug_or_eng(`
39    allow netmgrd shared_log_device:chr_file rw_file_perms;
40    allow netmgrd diag_device:chr_file rw_file_perms;
41')
42
43# execute toybox/toolbox
44allow netmgrd toolbox_exec:file rx_file_perms;
45
46#Allow netmgrd to use wakelock
47wakelock_use(netmgrd)
48