allow shell serial_device:chr_file rw_file_perms;

# allow to use ndc command to enable dns work
allow shell netd_socket:sock_file write;

# hack for running netcfg eth0 dhcp/ifconfig/ping on console session
allow shell self:packet_socket create_socket_perms;
allow shell system_prop:property_service set;

# hack for running start adbd/stop adbd on console session
allow shell ctl_default_prop:property_service set;

# hack for reading the mkshrc file after lava modified
allow shell unlabeled:file r_file_perms;

allow shell kernel:system module_request;