path: root/common/sepolicy/system_app.te (plain)
blob: c24b45c4b01acc9053432e21a5c6cbb4f0e0ce07

1	allow system_app sysfs_lowmemorykiller:file { getattr w_file_perms };
2	allow system_app subtitle_service:service_manager add;
3
4	#added for atv remote
5	allow system_app uhid_device:dir r_dir_perms;
6
7	allow system_app dhcp_data_file:file { r_file_perms };
8	allow system_app ppp_data_file:dir { create_dir_perms };
9	allow system_app ppp_data_file:file { create_file_perms };
10	allow system_app ppp_data_file:sock_file { create_file_perms };
11	allow system_app pppoe_wrapper_socket:sock_file { write setattr };
12	allow system_app pppoe_wrapper_socket:file { getattr write open };
13	allow system_app pppoe_wrapper:unix_dgram_socket sendto;
14	allow system_app dhcp_data_file:dir { r_dir_perms };
15	allow system_app dhcp_data_file:fifo_file { r_file_perms };
16
17	allow system_app vold:unix_stream_socket connectto;
18	allow system_app pppoe_service:service_manager add;
19	allow system_app dig_socket:sock_file write;
20
21	allow system_app iso9660:dir { search read open };
22	allow system_app unlabeled:dir { open search read write getattr };
23	allow system_app unlabeled:file { lock open read write getattr };
24
25	# /cache_file for dvb app creat update.zip file at /cache dir
26	allow system_app cache_file:dir {create_dir_perms create_file_perms rw_file_perms};
27	allow system_app cache_file:file {create_file_perms rw_file_perms getattr};
28
29	allow system_app log_file:dir { search read open getattr };
30	allow system_app log_file:file { read open getattr };
31	allow system_app tombstone_data_file:dir r_dir_perms;
32	allow system_app tombstone_data_file:file r_file_perms;
33
34	allow system_app shell_data_file:dir search;
35	allow system_app graphics_device:dir search;
36	allow system_app sysfs_xbmc:file {open read write};
37	allow system_app media_prop:property_service set;
38	allow system_app system_app:process setfscreate;
39	allow system_app socket_device:sock_file setattr;
40	allow system_app pppoe_wrapper_socket:sock_file create;
41	allow system_app pppoe_wrapper_socket:sock_file unlink;
42	allow system_app pppoe_wrapper_socket:file create;
43	allow system_app cache_recovery_file:dir { search read open write add_name remove_name};
44	allow system_app cache_recovery_file:file { create rw_file_perms unlink};
45	allow system_app update_data_file:dir {getattr search read write open add_name remove_name};
46	allow system_app update_data_file:file {getattr write read create open unlink};
47	allow system_app update_engine:binder {call transfer};
48
49	allow system_app tv_prop:file {open read getattr};
50	allow system_app tv_prop:property_service {set};
51
52	allow system_app proc_stat:file { read open getattr };
53	allow system_app proc_interrupts:file { read open getattr };
54
55	allow system_app exfat:dir create_dir_perms;
56	allow system_app exfat:file create_file_perms;
57
58	allow system_app ntfs:dir create_dir_perms;
59	allow system_app ntfs:file create_file_perms;
60
61	allow system_app mnt_media_rw_file:dir r_dir_perms;
62