19 lines
839 B
Plaintext
Executable File
19 lines
839 B
Plaintext
Executable File
type np_rockchip_drmservice, domain;
|
|
type np_rockchip_drmservice_exec, exec_type, vendor_file_type, file_type;
|
|
|
|
init_daemon_domain(np_rockchip_drmservice)
|
|
|
|
allow np_rockchip_drmservice sysfs_android_usb:dir { search };
|
|
allow np_rockchip_drmservice configfs:dir r_dir_perms;
|
|
allow np_rockchip_drmservice configfs:file rw_file_perms;
|
|
allow np_rockchip_drmservice proc_cmdline:file r_file_perms;
|
|
allow np_rockchip_drmservice vendor_data_file:file rw_file_perms;
|
|
allow np_rockchip_drmservice vendor_data_file:dir rw_dir_perms;
|
|
allow np_rockchip_drmservice storage_device:chr_file rw_file_perms;
|
|
allow np_rockchip_drmservice block_device:dir search;
|
|
|
|
dontaudit np_rockchip_drmservice self:capability { dac_read_search };
|
|
dontaudit np_rockchip_drmservice self:capability {dac_override};
|
|
|
|
set_prop(np_rockchip_drmservice, vendor_drmservice_prop)
|