71 lines
2.4 KiB
Plaintext
71 lines
2.4 KiB
Plaintext
# ==============================================
|
|
# Common SEPolicy Rule
|
|
# ==============================================
|
|
|
|
# Date : 2014/10/15
|
|
# Operation : Refine
|
|
# Purpose : Set NFC permission to access nfc_socket_file.
|
|
allow nfc nfc_socket_file:dir w_dir_perms;
|
|
|
|
# Date : 2014/10/15
|
|
# Operation : Refine
|
|
# Purpose : Set NFC permission to access custom file.
|
|
allow nfc custom_file:dir getattr;
|
|
|
|
# Date : 2014/10/15
|
|
# Operation : Refine
|
|
# Purpose : Set NFC permission to access nfc data file.
|
|
allow nfc nfc_data_file:dir { write remove_name add_name search create setattr };
|
|
allow nfc nfc_data_file:file { read getattr open rename write ioctl setattr create unlink };
|
|
|
|
# Date : 2014/10/15
|
|
# Operation : Refine
|
|
# Purpose : Set NFC permission to access SD card for debug purpose.
|
|
allow nfc sdcard_type:dir { write remove_name search create add_name };
|
|
allow nfc sdcard_type:file { read write getattr open rename create };
|
|
allow nfc vfat:dir { write add_name search };
|
|
allow nfc vfat:file { read write getattr open create };
|
|
|
|
# Date : 2014/10/15
|
|
# Operation : Refine
|
|
# Purpose : Set NFC permission for WFD
|
|
allow nfc surfaceflinger:dir search;
|
|
|
|
# Date : 2014/10/15
|
|
# Operation : Refine
|
|
# Purpose : For Mdlogger
|
|
allow nfc node:tcp_socket node_bind;
|
|
allow nfc port:tcp_socket name_bind;
|
|
allow nfc self:tcp_socket { setopt read bind create accept write getattr connect getopt listen };
|
|
|
|
# Date : 2014/10/15
|
|
# Operation : Refine
|
|
# Purpose : For NFC-JNI
|
|
allow nfc zygote:unix_stream_socket { getopt getattr };
|
|
|
|
# Date : WK1546
|
|
# Operation : Migration
|
|
# Purpose: Allow nfc to read binder from surfaceflinger
|
|
allow nfc surfaceflinger:fifo_file {read write};
|
|
|
|
# Date : 2016/06/30
|
|
# Operation : SQC
|
|
# Purpose : Allow NFC to plays sound which uses DrmServer
|
|
allow nfc drmserver_service:service_manager find;
|
|
|
|
# Date : 2016/07/04
|
|
# Operation : SQC
|
|
# Purpose : Allow NFC to access media data file
|
|
allow nfc media_rw_data_file:dir { create read open write remove_name search add_name };
|
|
allow nfc media_rw_data_file:file { read write create unlink open rename };
|
|
|
|
# Date : 2016/11/10
|
|
# Operation : SQC
|
|
# Purpose : Allow NFC to use FileManager share file
|
|
allow nfc sw_sync_device:chr_file getattr;
|
|
|
|
# Date : 2017/07/26
|
|
# Operation : Refine
|
|
# Purpose : Set NFC permission to access st21nfc_device ( nfc device node ) .
|
|
allow nfc st21nfc_device:chr_file { read write getattr open ioctl };
|