ynwang | 9fa8823 | 2016-06-17 15:05:10 -0700 | [diff] [blame^] | 1 | # storaged daemon |
| 2 | type storaged, domain; |
| 3 | type storaged_exec, exec_type, file_type; |
| 4 | |
| 5 | init_daemon_domain(storaged) |
| 6 | |
| 7 | # Write to /dev/kmsg (opened in init) |
| 8 | allow storaged kmsg_device:chr_file { write append }; |
| 9 | |
| 10 | # Read access to pseudo filesystems |
| 11 | allow storaged proc:dir r_dir_perms; |
| 12 | r_dir_file(storaged, sysfs_type) |
| 13 | r_dir_file(storaged, proc_net) |
| 14 | |
| 15 | # Read access to debugfs |
| 16 | allow storaged debugfs_mmc:dir search; |
| 17 | allow storaged debugfs_mmc:file r_file_perms; |
| 18 | |
| 19 | |