48 lines
1.6 KiB
Plaintext
48 lines
1.6 KiB
Plaintext
# ==============================================
|
|
# Policy File of /system/bin/bip Executable File
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
type bip, domain, mtkimsmddomain, netdomain;
|
|
type bip_exec, exec_type, file_type, vendor_file_type;
|
|
|
|
# ==============================================
|
|
# Common SEPolicy Rule
|
|
# ==============================================
|
|
# permissive bip;
|
|
init_daemon_domain(bip)
|
|
net_domain(bip)
|
|
|
|
# Date : WK14.42
|
|
# Operation : Migration
|
|
# Purpose : for bip send RTP/RTCP
|
|
allow bip self:capability { net_raw setuid setgid net_admin};
|
|
allow bip self:udp_socket { create write bind read setopt ioctl getattr shutdown connect };
|
|
allow bip node:udp_socket node_bind;
|
|
allow bip port:udp_socket name_bind;
|
|
allow bip fwmarkd_socket:sock_file write;
|
|
allow bip self:tcp_socket { create setopt ioctl bind listen accept read write connect };
|
|
allow bip port:tcp_socket name_connect;
|
|
allow bip self:netlink_route_socket read;
|
|
allow bip bip_socket:sock_file write;
|
|
allow bip vendor_bip_socket:sock_file write;
|
|
|
|
#get_prop(bip, net_radio_prop)
|
|
set_prop(bip, vendor_mtk_ril_mux_report_case_prop)
|
|
set_prop(bip, vendor_mtk_ctl_muxreport-daemon_prop)
|
|
|
|
# Purpose : for access ccci device
|
|
allow bip ccci_device:chr_file { read write open ioctl };
|
|
|
|
# Purpose : for raw socket
|
|
allow bip self:rawip_socket { create write bind setopt read getattr};
|
|
allow bip node:rawip_socket {node_bind};
|
|
|
|
allow bip netd:unix_stream_socket connectto;
|
|
allow bip netd_socket:sock_file write;
|
|
|
|
allow netd bip:fd use;
|
|
allow netd bip:tcp_socket { read write setopt getopt };
|
|
allow netd bip:udp_socket {read write setopt getopt};
|