sepolicy/rmtfs.te


1
2
3
4
5
6
7
8
9
10
11
12
13

type rmtfs, domain;
type rmtfs_exec, exec_type, vendor_file_type, file_type;

init_daemon_domain(rmtfs)

allow rmtfs block_device:dir search;
allow rmtfs modem_block_device:blk_file { open read };
allow rmtfs rmtfs_device:chr_file { open read write };
allow rmtfs self:capability net_admin;
allow rmtfs self:qipcrtr_socket { bind create getattr read setopt write };
allow rmtfs sysfs_rmtfs:dir { open read search};
allow rmtfs sysfs_rmtfs:file r_file_perms;
allow rmtfs sysfs_rmtfs:file write;