system_server.te revision 8c0ccd43df4b27684cfe6d6ee99a8c020a88e442 
1allow system_server self:socket ioctl;
2allowxperm system_server self:socket ioctl msm_sock_ipc_ioctls;
3
4binder_call(system_server, hal_camera_default)
5
6allow system_server persist_file:dir search;
7allow system_server persist_sensors_file:dir search;
8allow system_server persist_sensors_file:file r_file_perms;
9allow system_server wlan_device:chr_file rw_file_perms;
10
11# TODO(b/73123675): BatterySaver needs access to cpufreq. Remove this access
12# once cpufreq functionality is hidden behind a HAL.
13allow system_server sysfs_devices_system_cpu:file w_file_perms;
14
15# input files
16r_dir_file(system_server, idc_file)
17r_dir_file(system_server, keylayout_file)
18
19# TODO(b/30675296): Remove following dontaudit's upon resolution of this bug
20# The timerslack_ns denials spam the system really horribly
21dontaudit system_server audioserver:file write;
22dontaudit system_server untrusted_app:file write;
23dontaudit system_server hal_audio_default:file write;
24dontaudit system_server appdomain:file write;
25