23 lines
876 B
Plaintext
23 lines
876 B
Plaintext
|
type wfca, domain, netdomain, mtkimsmddomain;
|
||
|
|
type wfca_exec, exec_type, file_type, vendor_file_type;
|
||
|
|
|
||
|
|
init_daemon_domain(wfca)
|
||
|
|
|
||
|
|
allow wfca wfca_socket:sock_file write;
|
||
|
|
|
||
|
|
allow wfca self:capability2 block_suspend;
|
||
|
|
allow wfca self:capability { setgid setuid net_admin net_raw };
|
||
|
|
allow wfca self:udp_socket { ioctl read write create getattr bind setopt shutdown };
|
||
|
|
allow wfca self:rawip_socket { read write create getattr bind setopt };
|
||
|
|
allow wfca self:packet_socket { read create setopt };
|
||
|
|
|
||
|
|
allow wfca socket_device:sock_file { write create unlink };
|
||
|
|
allow wfca socket_device:dir { write add_name remove_name };
|
||
|
|
|
||
|
|
allow wfca { node port }:{ udp_socket rawip_socket } node_bind;
|
||
|
|
allow wfca fwmarkd_socket:sock_file write;
|
||
|
|
allow wfca ccci_device:chr_file { ioctl read write open };
|
||
|
|
allow wfca sysfs_wake_lock:file { read write open };
|
||
|
|
|
||
|
|
dontaudit wfca self:capability dac_override;
|