# ============================================== # Common SEPolicy Rule # ============================================== ########################## # Data files # # Trustonic data files /data/vendor/mcRegistry(/.*)? u:object_r:mobicore_data_file:s0 # Microtrust data files /data/vendor/thh(/.*)? u:object_r:teei_data_file:s0 /data/vendor/radio(/.*)? u:object_r:mtk_radio_data_file:s0 /data/vendor/verizon(/.*)? u:object_r:omadm_data_file:s0 /data/vendor/misc/msdata(/.*)? u:object_r:omadm_misc_file:s0 # TrustKernel add /data/vendor/t6(/.*)? u:object_r:tkcore_data_file:s0 /data/vendor/t6/app(/.*)? u:object_r:tkcore_spta_file:s0 /data/vendor/t6/tkcore.log u:object_r:tkcore_log_file:s0 # For Google Trusty Secure Storage Proxy /data/vendor/trusty(/.*)? u:object_r:tee_data_file:s0 # DOE /data/vendor/doe(/.*)? u:object_r:doe_vendor_data_file:s0 # MTK thp hal /data/vendor/thp(/.*)? u:object_r:mtk_thp_data_file:s0 # MTK MDM /data/vendor/md_mon(/.*)? u:object_r:md_monitor_vendor_file:s0 # EmCamera /data/vendor/camera_dump(/.*)? u:object_r:vendor_camera_dump_file:s0 /data/vendor/.img(/.*)? u:object_r:gpunn_data_file:s0 # DuraSpeed /data/duraspeed(/.*)? u:object_r:duraspeed_data_file:s0 /data/misc/log(/.*)? u:object_r:logmuch_data_file:s0 # Date: 2021/06/30 # Purpose: mtk nn info file /data/vendor/nn(/.*)? u:object_r:data_vendor_nn_file:s0 # Date: 2021/07/01 # Purpose: mtk hmp info file /data/vendor/hmp(/.*)? u:object_r:data_vendor_hmp_file:s0 ########################## # Devices # # TrustKernel add /dev/tkcoredrv u:object_r:tkcore_admin_device:s0 # For Google Trusty Secure Storage Proxy /dev/block/mmcblk0rpmb u:object_r:rpmb_block_device:s0 # Trustonic TEE devices /dev/mobicore u:object_r:mobicore_admin_device:s0 /dev/mobicore-user u:object_r:mobicore_user_device:s0 /dev/t-base-tui u:object_r:mobicore_tui_device:s0 # teeperf devices /dev/teeperf u:object_r:teeperf_device:s0 # Microtrust TEEI devices /dev/teei_config u:object_r:teei_config_device:s0 /dev/teei_client u:object_r:teei_client_device:s0 /dev/isee_tee0 u:object_r:teei_client_device:s0 /dev/tz_vfs u:object_r:teei_vfs_device:s0 # rpmb char device /dev/rpmb0 u:object_r:teei_rpmb_device:s0 /dev/mmcblk0rpmb u:object_r:rpmb_device:s0 # legacy char device for cross-platform compatibility /dev/emmcrpmb0 u:object_r:teei_rpmb_device:s0 /dev/teei_fp u:object_r:teei_fp_device:s0 /dev/ut_keymaster u:object_r:ut_keymaster_device:s0 /dev/utr_tui u:object_r:utr_tui_device:s0 # microtrust lite version use start /dev/teei_loader u:object_r:tee_device:s0 # microtrust lite version use end /dev/dri/card0 u:object_r:dri_device:s0 /dev/ttyC5 u:object_r:nwkopt_device:s0 /dev/mix_event u:object_r:tx_device:s0 # MTK thp hal /dev/thp u:object_r:gdix_thp_device:s0 /dev/input_mt_wrapper u:object_r:gdix_mt_wrapper_device:s0 # tetheroffload /dev/mddp u:object_r:mddp_device:s0 /dev/socket/rcs_ua_proxy(/.*)? u:object_r:rcs_ua_proxy_socket:s0 /dev/socket/rcs_volte_stack(/.*)? u:object_r:rcs_volte_stack_socket:s0 /dev/socket/rcs_rild(/.*)? u:object_r:rcs_rild_socket:s0 /dev/socket/statusd u:object_r:statusd_socket:s0 /dev/socket/rilproxy-mal(/.*)? u:object_r:rild_mal_socket:s0 /dev/socket/wo_epdg_ipsec(/.*)? u:object_r:wo_epdg_ipsec_socket:s0 # MTK ATCI /dev/socket/rild-atci(/.*)? u:object_r:rild_atci_socket:s0 /dev/socket/rilproxy-atci(/.*)? u:object_r:rilproxy_atci_socket:s0 /dev/socket/atci-service(/.*)? u:object_r:atci_service_socket:s0 /dev/socket/adb_atci_socket(/.*)? u:object_r:adb_atci_socket:s0 # MTK VTService /dev/socket/volte_imsvt1(/.*)? u:object_r:volte_imsvt1_socket:s0 /dev/goodix_fp u:object_r:fingerprint_device:s0 #MTK widevine kernel driver /dev/drm_wv u:object_r:widevine_drv_device:s0 ########################## # Vendor files # # TrustKernel add /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-service\.trustkernel u:object_r:hal_keymaster_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.1-service\.trustkernel u:object_r:hal_keymaster_default_exec:s0 # Trustonic TEE /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@3\.0-service\.trustonic u:object_r:hal_keymaster_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-service\.trustonic u:object_r:hal_keymaster_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.1-service\.trustonic u:object_r:hal_keymaster_default_exec:s0 # Trustonic TEE system files /(vendor|system/vendor)/app/mcRegistry(/.*)? u:object_r:mobicore_vendor_file:s0 /(vendor|system/vendor)/bin/mcDriverDaemon u:object_r:mobicore_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.trustonic\.tee@1\.1-service u:object_r:hal_tee_default_exec:s0 /(vendor|system/vendor)/bin/thermal u:object_r:thermal_exec:s0 /(vendor|system/vendor)/bin/volte_rcs_ua u:object_r:volte_rcs_ua_exec:s0 /(vendor|system/vendor)/bin/rcs_volte_stack u:object_r:rcs_volte_stack_exec:s0 /(vendor|system/vendor)/bin/volte_clientapi_ua u:object_r:volte_clientapi_ua_exec:s0 /(vendor|system/vendor)/bin/viarild u:object_r:viarild_exec:s0 /(vendor|system/vendor)/bin/statusd u:object_r:statusd_exec:s0 /(vendor|system/vendor)/bin/flashlessd u:object_r:flashlessd_exec:s0 /(vendor|system/vendor)/bin/ccci_rpcd u:object_r:ccci_rpcd_exec:s0 /(vendor|system/vendor)/bin/ipsec_mon u:object_r:ipsec_mon_exec:s0 /(vendor|system/vendor)/bin/getgameserver u:object_r:getgameserver_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.wfo@1\.0-service u:object_r:mtk_hal_wfo_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.clientapi@1\.0-service u:object_r:volte_clientapi_ua_exec:s0 /(vendor|system/vendor)/bin/hw/vtservice_hidl u:object_r:vtservice_hidl_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.rcs@1\.0-service u:object_r:volte_rcs_ua_exec:s0 /(vendor|system/vendor)/bin/STFlashTool u:object_r:stflashtool_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.dfps@1\.0-service u:object_r:mtk_hal_dfps_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.omadm@1\.0-service u:object_r:mtk_hal_omadm_exec:s0 # DOE /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.dplanner@1\.0-service u:object_r:mtk_hal_dplanner_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.dplanner@2\.0-service u:object_r:mtk_hal_dplanner_exec:s0 /(vendor|system/vendor)/bin/dconfig u:object_r:mtk_dconfig_exec:s0 /(vendor|system/vendor)/bin/dtc_vendor u:object_r:mtk_dconfig_exec:s0 # DRM Key Installation HIDL /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.keyinstall@1\.0-service u:object_r:mtk_hal_keyinstall_exec:s0 # DRM Key Manage HIDL /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.keymanage@1\.0-service u:object_r:mtk_hal_keymanage_exec:s0 /(vendor|system/vendor)/bin/wo_ipsec u:object_r:wo_ipsec_exec:s0 /(vendor|system/vendor)/bin/wo_charon u:object_r:wo_charon_exec:s0 /(vendor|system/vendor)/bin/wo_starter u:object_r:wo_starter_exec:s0 /(vendor|system/vendor)/bin/wo_stroke u:object_r:wo_stroke_exec:s0 /(vendor|system/vendor)/bin/wo_epdg_client u:object_r:wo_epdg_client_exec:s0 # netdagent /(vendor|system/vendor)/bin/netdagent u:object_r:netdagent_exec:s0 # MTK PPL /(vendor|system/vendor)/bin/ppl_agent u:object_r:ppl_agent_exec:s0 # Microtrust TEEI system files /(vendor|system/vendor)/bin/init_thh u:object_r:init_thh_service_exec:s0 /(vendor|system/vendor)/bin/teei_daemon u:object_r:tee_exec:s0 # microtrust THH daemon /(vendor|system/vendor)/bin/hw/vendor\.microtrust\.hardware\.thh@2\.0-service u:object_r:teei_hal_thh_exec:s0 # microtrust TUI daemon /(vendor|system/vendor)/bin/hw/vendor\.microtrust\.hardware\.tui@2\.0-service u:object_r:teei_hal_tui_exec:s0 # microtrust IFAA hidl service /(vendor|system/vendor)/bin/hw/vendor\.microtrust\.hardware\.ifaa@1\.0-service u:object_r:teei_hal_ifaa_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.microtrust\.hardware\.ifaa@2\.0-service u:object_r:teei_hal_ifaa_exec:s0 # microtrust WECHAT hidl service /(vendor|system/vendor)/bin/hw/vendor\.microtrust\.hardware\.soter@1\.0-service u:object_r:teei_hal_wechat_exec:s0 /(vendor|system/vendor)/bin/teei_loader u:object_r:tee_exec:s0 /(vendor|system/vendor)/bin/istorageproxyd u:object_r:tee_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.microtrust\.hardware\.capi@2\.0-service u:object_r:teei_hal_capi_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-service\.beanpod u:object_r:hal_keymaster_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-service\.beanpod\.lite u:object_r:hal_keymaster_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.1-service\.beanpod u:object_r:hal_keymaster_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.1-service\.beanpod\.lite u:object_r:hal_keymaster_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.security\.keymint@1\.0-service\.beanpod u:object_r:hal_keymint_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.gatekeeper@1\.0-service\.beanpod\.lite u:object_r:hal_gatekeeper_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.gatekeeper@1\.0-service\.itrusty u:object_r:hal_gatekeeper_default_exec:s0 /(vendor|system/vendor)/bin/bp_kmsetkey_ca u:object_r:bp_kmsetkey_ca_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerrpint@1\.1-service u:object_r:hal_fingerprint_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.neuralnetworks@1\.3-service-gpunn u:object_r:mtk_hal_neuralnetworks_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.neuralnetworks@1\.3-service-mtk-neuron u:object_r:mtk_hal_neuralnetworks_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.neuralnetworks@1\.3-service-mtk-neuron-lazy u:object_r:mtk_hal_neuralnetworks_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.neuralnetworks@1\.3-service-mtk-neuron-debug u:object_r:mtk_hal_neuralnetworks_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.neuralnetworks@1\.3-service-mtk-neuron-debug-lazy u:object_r:mtk_hal_neuralnetworks_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.neuralnetworks-shim-service-mtk u:object_r:mtk_hal_neuralnetworks_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.neuralnetworks-shell-service-mtk u:object_r:mtk_hal_neuralnetworks_exec:s0 # MTK nwk opt hal /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.nwk_opt@1\.0-service u:object_r:mtk_hal_nwk_opt_exec:s0 # MTK touchll hal /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.touchll@1\.0-service u:object_r:mtk_hal_touchll_exec:s0 # MTK thp hal /(vendor|system/vendor)/bin/hw/vendor\.mediatek\.hardware\.thp@1\.0-service u:object_r:mtk_hal_thp_exec:s0 # tetheroffload /(vendor|system/vendor)/bin/hw/tetheroffloadservice u:object_r:hal_tetheroffload_default_exec:s0 # MTK ATCI /(vendor|system/vendor)/bin/atcid u:object_r:atcid_exec:s0 /(vendor|system/vendor)/bin/atci_service u:object_r:atci_service_exec:s0 # MTK PMS ext /(vendor|system/vendor)/operator/app(/.*)? u:object_r:vendor_app_file:s0 /(vendor|system/vendor)/etc/rsc/[^/]+/app(/.*)? u:object_r:vendor_app_file:s0 /(vendor|system/vendor)/etc/rsc/[^/]+/priv-app(/.*)? u:object_r:vendor_app_file:s0 /(vendor|system/vendor)/etc/rsc/[^/]+/plugin(/.*)? u:object_r:vendor_app_file:s0 /(vendor|system/vendor)/etc/rsc/[^/]+/overlay(/.*)? u:object_r:vendor_overlay_file:s0 /(vendor|system/vendor)/etc/rsc/[^/]+/framework(/.*)? u:object_r:vendor_framework_file:s0 /(vendor|system/vendor)/bin/remosaic_daemon u:object_r:remosaic_daemon_exec:s0 # HDCP /(vendor|system/vendor)/bin/hw/vendor\.tesiai\.hardware\.hdcpconnection@1\.0-service u:object_r:tesiai_hal_hdcp_exec:s0 # ST nfcstackp service /vendor/bin/nfcstackp-vendor u:object_r:nfcstackp_vendor_exec:s0 # DMC (Diagnostic Monitoring Collector) /vendor/bin/dmc_core u:object_r:dmc_core_exec:s0 # DMC Packet Monitor (PKM) /vendor/bin/mtk_pkm_service u:object_r:mtk_pkm_service_exec:s0 # TrustKernel add /vendor/bin/teed u:object_r:tee_exec:s0 # For Google Trusty Secure Storage Proxy /vendor/bin/storageproxyd u:object_r:tee_exec:s0 /(vendor|system/vendor)/bin/rpmb_svc u:object_r:tee_exec:s0 # MTK MDM /vendor/bin/md_monitor u:object_r:md_monitor_exec:s0 /vendor/app/t6(/.*)? u:object_r:tkcore_systa_file:s0 ########################## # Others # /mnt/vendor/persist/t6(/.*)? u:object_r:tkcore_protect_data_file:s0 /mnt/vendor/protect_f/tee(/.*)? u:object_r:tkcore_protect_data_file:s0 # Logo Updater /vendor/bin/logo_updater u:object_r:logo_updater_exec:s0