| Ravit Dennis | eef3499 | 2014-10-29 20:09:18 +0200 | [diff] [blame] | 1 | # Policy for usf daemons |
| Biswajit Paul | 6786a92 | 2017-03-16 11:53:53 -0700 | [diff] [blame] | 2 | type usf, domain; |
| Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 3 | type usf_exec, exec_type, vendor_file_type, file_type; |
| Ravit Dennis | eef3499 | 2014-10-29 20:09:18 +0200 | [diff] [blame] | 4 | |
| 5 | # Started by init |
| 6 | init_daemon_domain(usf) |
| 7 | net_domain(usf) |
| 8 | |
| 9 | # Ultrasound device |
| 10 | allow usf usf_device:chr_file rw_file_perms; |
| 11 | |
| 12 | # Audio |
| 13 | allow usf audio_data_file:sock_file write; |
| Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 14 | #allow usf mediaserver:unix_stream_socket connectto; |
| Ravit Dennis | eef3499 | 2014-10-29 20:09:18 +0200 | [diff] [blame] | 15 | allow usf audio_data_file:dir r_dir_perms; |
| 16 | allow usf audio_device:chr_file rw_file_perms; |
| 17 | allow usf proc_audiod:file r_file_perms; |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 18 | allow usf audio_device:dir r_dir_perms; |
| Ravit Dennis | eef3499 | 2014-10-29 20:09:18 +0200 | [diff] [blame] | 19 | |
| 20 | # Data files and persist storage |
| 21 | allow usf usf_data_file:dir rw_dir_perms; |
| Biswajit Paul | 378630b | 2015-09-29 14:47:55 -0700 | [diff] [blame] | 22 | allow usf usf_data_file:{ file sock_file fifo_file } create_file_perms; |
| Ravit Dennis | eef3499 | 2014-10-29 20:09:18 +0200 | [diff] [blame] | 23 | allow usf usf_data_file:lnk_file r_file_perms; |
| 24 | r_dir_file(usf, persist_file) |
| 25 | r_dir_file(usf, persist_usf_file) |
| 26 | |
| 27 | # Properties |
| sahil madeka | a3608c9 | 2017-05-12 15:41:40 -0700 | [diff] [blame] | 28 | set_prop(usf, ctl_default_prop) |
| 29 | set_prop(usf, usf_prop) |