path: root/sepolicy/tvserver.te (plain)
blob: 94ce62c17b00024a5803211792f9936d48dde056

1	type tvserver, domain;
2	type tvserver_exec, exec_type, vendor_file_type, file_type;
3
4	init_daemon_domain(tvserver)
5
6	allow tvserver vndbinder_device:chr_file { read write open ioctl };
7	allow tvserver vndservicemanager:binder { call transfer };
8
9	allow tvserver hwservicemanager:binder { call transfer };
10	allow tvserver { tvserver_hwservice hidl_base_hwservice }:hwservice_manager { add };
11
12	allow tvserver hwservicemanager_prop:file { open read getattr };
13
14	allow tvserver { hal_tv_input_default system_app }:binder { call transfer };
15
16
17	allow tvserver { video_device dvb_video_device amvideo_device mediactl_video_device }:chr_file { read write open ioctl getattr };
18	allow tvserver { hdmirx0_device avin_device }:chr_file { read write open ioctl getattr };
19
20	allow tvserver audio_device:dir { search };
21	allow tvserver audio_device:chr_file { read write open ioctl };
22
23	get_prop(tvserver, media_prop)
24	get_prop(tvserver, tv_prop)
25	set_prop(tvserver, tv_prop)
26	set_prop(tvserver, tv_config_prop)
27	allow tvserver tv_prop:file { read open getattr };
28
29	allow tvserver proc:file { read write open ioctl getattr };
30
31	allow tvserver param_tv_file:dir { search read write open add_name remove_name rmdir };
32	allow tvserver param_tv_file:file { create open read write setattr getattr lock unlink ioctl };
33	allow param_tv_file labeledfs:filesystem { associate };
34
35	allow tvserver { vendor_shell_exec vendor_toolbox_exec vendor_file }:file execute_no_trans;
36
37	allow tvserver { system_control }:binder { call transfer };
38
39	#allow tvserver hal_allocator_default:fd { use };
40	allow tvserver { sysfs_cec sysfs_video sysfs_audio sysfs_lcd sysfs_rdma sysfs_di sysfs_am_vecm }:file { read write open getattr };
41
42	allow tvserver sysfs_display_mode:file { read open getattr };
43
44	allow tvserver system_file:dir { open };
45	allow tvserver { sysfs_video sysfs_cec sysfs_di sysfs_am_vecm }:dir { search write add_name };
46
47	allow tvserver systemcontrol_hwservice:hwservice_manager { find };
48
49