type wcnss_service, domain;
type wcnss_service_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(wcnss_service)
net_domain(wcnss_service)
vndbinder_use(wcnss_service)

# qipcrtr_socket is used for modem IPC router socket to communicate with QMI
allow wcnss_service self:qipcrtr_socket create_socket_perms_no_ioctl;

# netlink_generic_socket is used for event/data change with WLAN driver
allow wcnss_service self:netlink_generic_socket create_socket_perms_no_ioctl;
allow wcnss_service self:netlink_socket create_socket_perms_no_ioctl;

allow wcnss_service cnss_vendor_data_file:dir create_dir_perms;
allow wcnss_service cnss_vendor_data_file:file create_file_perms;

# pkt logging for cnss_diag
userdebug_or_eng(`
  r_dir_file(wcnss_service, proc_wifi_dbg)
')

# For Peripheral Manager in cnss-daemon
binder_call(wcnss_service, vendor_per_mgr)
allow wcnss_service vendor_per_mgr_service:service_manager find;

# files in /data/vendor/firmware/wifi
allow wcnss_service updated_wifi_firmware_data_file:dir r_dir_perms;
allow wcnss_service updated_wifi_firmware_data_file:file r_file_perms;

# files in /sys
r_dir_file(wcnss_service, sysfs_msm_subsys)
r_dir_file(wcnss_service, sysfs_soc)
r_dir_file(wcnss_service, sysfs_ssr)
r_dir_file(wcnss_service, sysfs_net)