Nolen Johnson
a09def5201
Change-Id: If6225006ff850d1f9141b81448aa61d54e478a4d (cherry picked from commit 121876b992f3edbd7a79926ef6b9d19b86b9bfff)
29 lines
949 B
Plaintext
29 lines
949 B
Plaintext
# Type declarations
|
|
type jc_setup_exec, exec_type, file_type, vendor_file_type;
|
|
type jc_setup, domain;
|
|
|
|
# Allow jc_setup to be run
|
|
allow jc_setup jc_setup_exec:file { execute_no_trans open };
|
|
|
|
# Declare jc_setup as an init domain
|
|
init_daemon_domain(jc_setup)
|
|
|
|
# Allow jc_setup to utilize the tools it needs
|
|
allow jc_setup self:capability chown;
|
|
allow jc_setup vendor_shell_exec:file rx_file_perms;
|
|
not_full_treble(`allow jc_setup shell_exec:file rx_file_perms;')
|
|
|
|
allow jc_setup vendor_toolbox_exec:file rx_file_perms;
|
|
not_full_treble(`allow jc_setup toolbox_exec:file rx_file_perms;')
|
|
|
|
# Allow jc_setup to execute properly
|
|
allow jc_setup jc_setup_exec:file ioctl;
|
|
|
|
# Allow jc_setup to read factory file
|
|
r_dir_file(jc_setup, factory_file)
|
|
allow jc_setup mnt_vendor_file:dir r_dir_perms;
|
|
|
|
# Allow editing BT pairing data - NEVERALLOW
|
|
allow jc_setup bluetooth_data_file:dir create_dir_perms;
|
|
allow jc_setup bluetooth_data_file:file create_file_perms;
|