1# associate netdomain to use for accessing internet sockets
2net_domain(hal_tetheroffload_default)
3
4userdebug_or_eng(`
5  # Allow using the logging file between ipacm and ipacm-diag
6  unix_socket_send(hal_tetheroffload_default, ipacm, hal_tetheroffload_default)
7')
8# Allow operations with /dev/ipa, /dev/wwan_ioctl and /dev/ipaNatTable
9allow hal_tetheroffload_default ipa_dev:chr_file rw_file_perms;
10
11# Allow receiving NETLINK messages
12allow hal_tetheroffload_default self:{
13    netlink_socket
14    netlink_generic_socket
15} create_socket_perms_no_ioctl;
16
17# Allow creating and modifying the PID file
18allow hal_tetheroffload_default ipa_vendor_data_file:dir w_dir_perms;
19allow hal_tetheroffload_default ipa_vendor_data_file:file create_file_perms;
20
21# Register to hwbinder service
22hwbinder_use(hal_tetheroffload_default)
23get_prop(hal_tetheroffload_default, hwservicemanager_prop)
24