2022-09-06 10:36:43 +08:00
|
|
|
type insmod-sh, domain;
|
|
|
|
|
type insmod-sh_exec, vendor_file_type, exec_type, file_type;
|
|
|
|
|
init_daemon_domain(insmod-sh)
|
|
|
|
|
|
|
|
|
|
allow insmod-sh self:capability sys_module;
|
2023-03-15 09:52:49 +00:00
|
|
|
allow insmod-sh system_dlkm_file:dir r_dir_perms;
|
|
|
|
|
allow insmod-sh system_dlkm_file:file r_file_perms;
|
|
|
|
|
allow insmod-sh system_dlkm_file:system module_load;
|
2022-09-06 10:36:43 +08:00
|
|
|
allow insmod-sh vendor_kernel_modules:system module_load;
|
|
|
|
|
allow insmod-sh vendor_toolbox_exec:file execute_no_trans;
|
|
|
|
|
|
|
|
|
|
set_prop(insmod-sh, vendor_device_prop)
|
|
|
|
|
|
|
|
|
|
dontaudit insmod-sh proc_cmdline:file r_file_perms;
|
