sepolicy/policy/chromeos/dbus/cros_dbus_daemon.te

type cros_dbus_daemon, chromeos_domain, domain;

permissive cros_dbus_daemon;

domain_auto_trans(cros_init, cros_dbus_daemon_exec, cros_dbus_daemon);

filetrans_pattern(cros_dbus_daemon, cros_run_dbus, cros_system_bus_socket, sock_file)

pid_file(cros_dbus_daemon, cros_run, "dbus.pid");

allow cros_dbus_daemon domain:dir search;
allow cros_dbus_daemon domain:file { open read };

allow cros_dbus_daemon self:capability { setuid setgid sys_resource };

arc_cts_fails_release(`
allow cros_dbus_daemon self:capability { dac_override };
', (`cros_dbus_daemon'));