| type vendor_modprobe, domain; |
| |
| # For the use of /vendor/bin/modprobe from vendor init.rc fragments |
| domain_trans(init, vendor_toolbox_exec, vendor_modprobe) |
| |
| allow vendor_modprobe proc_modules:file r_file_perms; |
| allow vendor_modprobe proc_cmdline:file r_file_perms; |
| allow vendor_modprobe kmsg_device:chr_file w_file_perms; |
| allow vendor_modprobe self:global_capability_class_set sys_module; |
| allow vendor_modprobe kernel:key search; |
| |
| allow vendor_modprobe { vendor_file }:system module_load; |
| r_dir_file(vendor_modprobe, { vendor_file }) |