|
|
|
@ -0,0 +1,74 @@
|
|
|
|
|
# Copyright (c) 2022 Qualcomm Innovation Center, Inc. All rights reserved.
|
|
|
|
|
#
|
|
|
|
|
# Redistribution and use in source and binary forms, with or without
|
|
|
|
|
# modification, are permitted (subject to the limitations in the
|
|
|
|
|
# disclaimer below) provided that the following conditions are met:
|
|
|
|
|
#
|
|
|
|
|
# * Redistributions of source code must retain the above copyright
|
|
|
|
|
# notice, this list of conditions and the following disclaimer.
|
|
|
|
|
#
|
|
|
|
|
# * Redistributions in binary form must reproduce the above
|
|
|
|
|
# copyright notice, this list of conditions and the following
|
|
|
|
|
# disclaimer in the documentation and/or other materials provided
|
|
|
|
|
# with the distribution.
|
|
|
|
|
#
|
|
|
|
|
# * Neither the name of Qualcomm Innovation Center, Inc. nor the names of its
|
|
|
|
|
# contributors may be used to endorse or promote products derived
|
|
|
|
|
# from this software without specific prior written permission.
|
|
|
|
|
#
|
|
|
|
|
# NO EXPRESS OR IMPLIED LICENSES TO ANY PARTY'S PATENT RIGHTS ARE
|
|
|
|
|
# GRANTED BY THIS LICENSE. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT
|
|
|
|
|
# HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED
|
|
|
|
|
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
|
|
|
|
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
|
|
|
|
# IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
|
|
|
|
|
# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
|
|
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
|
|
|
|
|
# GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
|
|
|
# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
|
|
|
|
|
# IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
|
|
|
|
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
|
|
|
|
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
|
|
|
|
|
|
# qva/vendor/common/location_xtwifi_inetagent.te - sepolicy rules for qti value added location module - xtwifi-inet-agent
|
|
|
|
|
|
|
|
|
|
type vendor_location_xtwifi_inetagent, domain;
|
|
|
|
|
type vendor_location_xtwifi_inetagent_exec, exec_type, vendor_file_type, file_type;
|
|
|
|
|
|
|
|
|
|
# allows loc_launcher to launch xtwifi-inet-agent
|
|
|
|
|
domain_auto_trans(vendor_location, vendor_location_xtwifi_inetagent_exec, vendor_location_xtwifi_inetagent)
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_location:fd use;
|
|
|
|
|
|
|
|
|
|
# allows file access in /data/vendor/location
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_location_data_file:dir create_dir_perms;
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_location_data_file:file create_file_perms;
|
|
|
|
|
|
|
|
|
|
# allows socket access in /dev/socket/location
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_location_socket:lnk_file { read open getattr };
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_location_socket:sock_file create_file_perms;
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_location_socket:dir rw_dir_perms;
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_location:unix_dgram_socket { read write sendto };
|
|
|
|
|
|
|
|
|
|
# allow socket communication with gnss hal
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_hal_gnss_qti:unix_dgram_socket sendto;
|
|
|
|
|
|
|
|
|
|
hwbinder_use(vendor_location_xtwifi_inetagent)
|
|
|
|
|
get_prop(vendor_location_xtwifi_inetagent, hwservicemanager_prop)
|
|
|
|
|
binder_call(vendor_location_xtwifi_inetagent, system_server)
|
|
|
|
|
|
|
|
|
|
# allows shell execute xtwifi-inet-agent in userdebug mode.
|
|
|
|
|
userdebug_or_eng(`
|
|
|
|
|
allow shell vendor_location_xtwifi_inetagent_exec:file rx_file_perms;
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
# Enable standard network access
|
|
|
|
|
net_domain(vendor_location_xtwifi_inetagent)
|
|
|
|
|
|
|
|
|
|
# send to /dev/socket/location/mq/LOWI-SERVER
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_location_lowi_server:unix_dgram_socket sendto;
|
|
|
|
|
|
|
|
|
|
## send to /dev/socket/location/mq/XTWiFi-PE
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_location_xtwifi_client:unix_dgram_socket sendto;
|
|
|
|
|
|
|
|
|
|
## send to /dev/socket/location/mq/SLIM
|
|
|
|
|
allow vendor_location_xtwifi_inetagent vendor_location_slim_daemon:unix_dgram_socket sendto;
|