| # CNEService app | |
| type qcneservice, domain, coredomain; | |
| app_domain(qcneservice) | |
| net_domain(qcneservice) | |
| add_service(qcneservice, cne_service) | |
| unix_socket_connect(qcneservice, cnd, cnd) | |
| allow qcneservice { app_api_service radio_service }:service_manager find; | |
| # Read and write /data/data subdirectory. | |
| allow qcneservice system_app_data_file:dir create_dir_perms; | |
| allow qcneservice system_app_data_file:{ file lnk_file } create_file_perms; | |
| allow qcneservice cgroup:file w_file_perms; |