type bluetoothd_snoop, domain; type bluetoothd_snoop_exec, exec_type, file_type; # Start bluetoothd_snoop from init init_daemon_domain(bluetoothd_snoop) # directory search and read caps allow bluetoothd_snoop self:capability dac_read_search; # use raw and packet sockets caps allow bluetoothd_snoop self:capability net_raw; # monitor socket access allow bluetoothd_snoop self:socket { create bind setopt read }; # sdcard access allow bluetoothd_snoop fuse:dir w_dir_perms; allow bluetoothd_snoop fuse:file create_file_perms;