21 lines
581 B
Plaintext
21 lines
581 B
Plaintext
|
# sensord
|
||
|
|
type sensord, domain, mlstrustedsubject;
|
||
|
|
type sensord_exec, exec_type, file_type;
|
||
|
|
|
||
|
|
pdx_server(sensord)
|
||
|
|
use_pdx(sensord, bufferhubd)
|
||
|
|
use_pdx(sensord, performanced)
|
||
|
|
|
||
|
|
# Access /dev/ion
|
||
|
|
allow sensord ion_device:chr_file r_file_perms;
|
||
|
|
|
||
|
|
allow sensord sensors_device:chr_file rw_file_perms;
|
||
|
|
|
||
|
|
binder_use(sensord)
|
||
|
|
binder_call(sensord, system_server)
|
||
|
|
allow sensord system_server:unix_stream_socket { read write };
|
||
|
|
|
||
|
|
allow sensord sensorservice_service:service_manager find;
|
||
|
|
# permission_service is used by the NDK sensor APIs.
|
||
|
|
allow sensord permission_service:service_manager find;
|