1# Policy for pm-service and pm-proxy
2type per_mgr, domain;
3type per_mgr_exec, exec_type, vendor_file_type, file_type;
4
5init_daemon_domain(per_mgr);
6
7add_service(per_mgr, per_mgr_service)
8
9vndbinder_use(per_mgr)
10binder_call(per_mgr, hal_gnss)
11binder_call(per_mgr, per_proxy)
12binder_call(per_mgr, wcnss_service)
13binder_call(per_mgr, rild)
14
15allow per_mgr self:capability net_bind_service;
16
17allow per_mgr firmware_file:file r_file_perms;
18allow per_mgr firmware_file:dir search;
19
20allow per_mgr self:socket create_socket_perms;
21allowxperm per_mgr self:socket ioctl msm_sock_ipc_ioctls;
22allow per_mgr ssr_device:chr_file { open read };
23
24r_dir_file(per_mgr, sysfs_msm_subsys)
25r_dir_file(per_mgr, sysfs)
26