kitakami-common: sepolicy: Add more ims policies

sepolicy/vendor/file.te

@@ -21,3 +21,5 @@ type fpc_data_file, file_type;
 # Camera
 type sysfs_camera, sysfs_type, fs_type;
 
+# Socket
+type ims_socket, file_type;

sepolicy/vendor/file_contexts

@@ -75,6 +75,12 @@
 /system/vendor/bin/mm-pp-daemon                            u:object_r:ppd_exec:s0
 /system/vendor/bin/perfd                                   u:object_r:perfd_exec:s0
 /system/vendor/bin/timekeep                                u:object_r:timekeep_exec:s0
+/system/vendor/bin/imsdatadaemon                           u:object_r:ims_exec:s0
+/system/vendor/bin/imsqmidaemon                            u:object_r:ims_exec:s0
+/system/vendor/bin/ims_rtp_daemon                          u:object_r:ims_exec:s0
 
 /system/vendor/(lib|lib64)/libril-wrapper\.so              u:object_r:hal_ril_wrapper_exec:s0
 
+/dev/socket/ims_qmid                                  u:object_r:ims_socket:s0
+/dev/socket/ims_datad                                 u:object_r:ims_socket:s0
+/dev/socket/ims_rtpd                                  u:object_r:ims_socket:s0

sepolicy/vendor/property.te

@@ -2,3 +2,5 @@ type timekeep_prop, property_type;
 type tee_prop, property_type;
 type ta_prop, property_type;
 type display_prop, property_type;
+type qcom_ims_prop, property_type;
+type rcs_prop, property_type;

sepolicy/vendor/property_contexts

@@ -3,3 +3,6 @@ sys.listeners.registered   u:object_r:tee_prop:s0
 persist.sys.timeadjust     u:object_r:timekeep_prop:s0
 persist.service.bdroid.bdaddr u:object_r:bluetooth_prop:s0
 persist.tareset.notfirstboot  u:object_r:ta_prop:s0
+net.r_rmnet     u:object_r:net_radio_prop:s0
+rcs.            u:object_r:rcs_prop:s0
+sys.ims.        u:object_r:qcom_ims_prop:s0

sepolicy/vendor/radio.te

 allow radio gpuservice:binder call;
 allow radio system_app_data_file:dir getattr;
+
+# Grant access to ims socket that is created by ims_qmid, ims_datad
+allow radio ims_socket:sock_file write;
+
+# Connect to ims service.
+allow radio ims:unix_stream_socket connectto;
+
+# Access RCS properties
+set_prop(radio, rcs_prop)

sepolicy/vendor/service_contexts

 com.sony.timekeep u:object_r:timekeep_service:s0
+rcs               u:object_r:radio_service:s0