| Avijit Kanti Das | f2b7a74 | 2014-10-24 18:32:44 -0700 | [diff] [blame] | 1 | #integrated sensor process |
| Biswajit Paul | 6786a92 | 2017-03-16 11:53:53 -0700 | [diff] [blame] | 2 | type ims, domain; |
| Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 3 | type ims_exec, exec_type, vendor_file_type, file_type; |
| Avijit Kanti Das | f2b7a74 | 2014-10-24 18:32:44 -0700 | [diff] [blame] | 4 | |
| 5 | # Started by init |
| 6 | init_daemon_domain(ims) |
| Avijit Kanti Das | cfa67e9 | 2014-11-20 17:49:15 -0800 | [diff] [blame] | 7 | net_domain(ims) |
| Avijit Kanti Das | f2b7a74 | 2014-10-24 18:32:44 -0700 | [diff] [blame] | 8 | |
| Avijit Kanti Das | cfa67e9 | 2014-11-20 17:49:15 -0800 | [diff] [blame] | 9 | # Talk to qmuxd |
| 10 | qmux_socket(ims) |
| 11 | |
| Biswajit Paul | ec0f628 | 2016-06-08 11:05:49 -0700 | [diff] [blame] | 12 | allow ims self:capability net_bind_service; |
| Avijit Kanti Das | cfa67e9 | 2014-11-20 17:49:15 -0800 | [diff] [blame] | 13 | |
| 14 | # Use generic netlink socket |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 15 | allow ims self:{ |
| 16 | netlink_socket |
| 17 | socket |
| Biswajit Paul | c6024d2 | 2016-07-06 17:35:41 -0700 | [diff] [blame] | 18 | netlink_generic_socket |
| Biswajit Paul | 2d35d98 | 2017-02-01 17:40:10 -0800 | [diff] [blame] | 19 | } create_socket_perms_no_ioctl; |
| Avijit Kanti Das | cfa67e9 | 2014-11-20 17:49:15 -0800 | [diff] [blame] | 20 | |
| 21 | # To run NDC command |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 22 | allow ims { |
| Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 23 | vendor_shell_exec |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 24 | system_file |
| 25 | # IMS route installation |
| 26 | wcnss_service_exec |
| Divya Sharma | 7caea0a | 2017-03-06 15:36:22 -0800 | [diff] [blame] | 27 | # for WPA supplicant comment to remove compilation issue |
| 28 | #wpa_exec |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 29 | }:file rx_file_perms; |
| Avijit Kanti Das | cfa67e9 | 2014-11-20 17:49:15 -0800 | [diff] [blame] | 30 | |
| Avijit Kanti Das | cfa67e9 | 2014-11-20 17:49:15 -0800 | [diff] [blame] | 31 | # Talk to qumuxd via ims_socket |
| 32 | unix_socket_connect(ims, ims, qmuxd) |
| 33 | |
| sahil madeka | a3608c9 | 2017-05-12 15:41:40 -0700 | [diff] [blame] | 34 | set_prop(ims, qcom_ims_prop) |
| Devi Sandeep Endluri V V | 3cfe83d | 2018-02-20 12:53:15 +0530 | [diff] [blame] | 35 | set_prop(ims, ctl_vendor_imsrcsservice_prop) |
| Avijit Kanti Das | 6637604 | 2014-12-01 11:21:16 -0800 | [diff] [blame] | 36 | |
| 37 | # permissions needed for IMS to connect and interact with WPA supplicant |
| Divya Sharma | 7caea0a | 2017-03-06 15:36:22 -0800 | [diff] [blame] | 38 | # comment to remove compilation |
| 39 | #unix_socket_send(ims, wpa, wpa) |
| Avijit Kanti Das | 6637604 | 2014-12-01 11:21:16 -0800 | [diff] [blame] | 40 | allow ims wpa_socket:dir w_dir_perms; |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 41 | allow ims wpa_socket:sock_file { create unlink setattr }; |
| Avijit Kanti Das | 6637604 | 2014-12-01 11:21:16 -0800 | [diff] [blame] | 42 | allow ims wifi_data_file:dir r_dir_perms; |
| 43 | |
| 44 | # permissions for communication with CNE in LBO use case |
| 45 | unix_socket_connect(ims, cnd, cnd) |
| Avijit Kanti Das | e1dd186 | 2014-12-03 10:39:35 -0800 | [diff] [blame] | 46 | |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 47 | #Allow access to netmgrd socket |
| 48 | netmgr_socket(ims); |
| 49 | |
| 50 | # Inherit and use open files from radio. |
| 51 | allow ims radio:fd use; |
| Biswajit Paul | 277acbb | 2016-07-20 12:02:14 -0700 | [diff] [blame] | 52 | |
| 53 | #diag |
| 54 | userdebug_or_eng(` |
| 55 | diag_use(ims) |
| 56 | ') |
| Biswajit Paul | 700ef6a | 2017-03-31 11:22:34 -0700 | [diff] [blame] | 57 | allow ims self:{ socket udp_socket } ioctl; |
| 58 | # ioctlcmd=c302 |
| 59 | allowxperm ims self:socket ioctl msm_sock_ipc_ioctls; |
| 60 | # ioctlcmd=89fd |
| 61 | allowxperm ims self:udp_socket ioctl priv_sock_ioctls; |
| 62 | allow ims sysfs:file r_file_perms; |
| Sunmeet Gill | 575d249 | 2017-05-22 19:03:52 -0700 | [diff] [blame] | 63 | allow ims sysfs_data:file r_file_perms; |
| Devi Sandeep Endluri V V | 98379eb | 2017-06-20 22:19:40 -0700 | [diff] [blame] | 64 | hwbinder_use(ims) |
| 65 | get_prop(ims, hwservicemanager_prop) |
| 66 | get_prop(ims, qcom_ims_prop) |
| 67 | allow ims hal_cne_hwservice:hwservice_manager find; |
| 68 | binder_call(ims, cnd) |