slad.te 1.7 KB

123456789101112131415161718192021222324252627282930313233343536
  1. type slad, domain;
  2. type slad_exec, exec_type, file_type, vendor_file_type;
  3. type qti_proc_sla, proc_type;
  4. allow slad slad_socket:sock_file { getattr read write };
  5. allow slad slad_socket:sock_file unlink;
  6. allow slad slad:netlink_socket { bind create read write };
  7. allow slad proc_net:file { getattr open read };
  8. allow slad system_file:lnk_file getattr;
  9. allow slad self:capability { net_admin net_raw setgid setuid };
  10. allow slad self:netlink_tcpdiag_socket { create_socket_perms_no_ioctl nlmsg_read nlmsg_write };
  11. allow slad self:netlink_generic_socket { bind create read setopt write };
  12. allow slad self:rawip_socket { create getopt read setopt write };
  13. allow slad self:udp_socket { connect create getattr };
  14. allow slad sla_data_file:dir { add_name create read remove_name search unlink write };
  15. allow slad sla_data_file:dir create_dir_perms;
  16. allow slad sla_data_file:file create_file_perms;
  17. allow slad sla_data_file:file rw_file_perms;
  18. allow slad socket_device:dir write;
  19. allow slad socket_device:dir remove_name;
  20. allow slad socket_device:dir add_name;
  21. allow slad socket_device:sock_file { create setattr unlink };
  22. allow slad qti_proc_sla:dir search;
  23. allow slad qti_proc_sla:file { map open read write };
  24. allow slad vendor_shell_exec:file execute_no_trans;
  25. dontaudit slad self:capability dac_read_search;
  26. init_daemon_domain(slad)
  27. unix_socket_connect(slad, dnsproxyd, slad)
  28. unix_socket_connect(slad, dnsproxyd, netd)
  29. unix_socket_connect(slad, dnsproxyd, init)
  30. unix_socket_connect(slad, fwmarkd, slad)
  31. unix_socket_connect(slad, fwmarkd, netd)
  32. unix_socket_connect(slad, fwmarkd, init)
  33. unix_socket_connect(slad, property, slad)
  34. unix_socket_connect(slad, property, netd)
  35. set_prop(slad, vendor_slad_prop)
  36. net_domain(slad)