android_device_mediatek_sepolicy/non_plat/mtk_hal_power.te

# ==============================================================================
# Type Declaration
# ==============================================================================
type mtk_hal_power, domain;
type mtk_hal_power_exec, exec_type, file_type, vendor_file_type;

# hwbinder access
init_daemon_domain(mtk_hal_power)
hwbinder_use(mtk_hal_power);

allow mtk_hal_power hwservicemanager_prop:file r_file_perms;
allow mtk_hal_power hal_power_hwservice:hwservice_manager { add find };
allow mtk_hal_power hidl_base_hwservice:hwservice_manager add;

add_hwservice(hal_power, mtk_hal_power_hwservice)
allow hal_power_client mtk_hal_power_hwservice:hwservice_manager find;

hal_server_domain(mtk_hal_power, hal_power);

# proc fs
allow mtk_hal_power proc:dir  {search getattr};
allow mtk_hal_power proc:file {getattr open read write ioctl};

# sysfs
allow mtk_hal_light sysfs:file rw_file_perms;
allow mtk_hal_power sysfs_devices_system_cpu:file write;

# debugfs
allow mtk_hal_power debugfs_ged:dir search;
allow mtk_hal_power debugfs_ged:file { getattr open read write };

# proc_thermal
allow mtk_hal_power proc_thermal:file { write open };

# proc info
allow mtk_hal_power mtk_hal_audio:dir getattr;

# Date : 2017/10/02
# Operation: SQC
# Purpose : Allow powerHAL to access perfmgr
allow mtk_hal_power proc_perfmgr:dir search;
allow mtk_hal_power proc_perfmgr:file { getattr open read write ioctl };

# Date : 2017/10/11
# Operation: SQC
# Purpose : Allow powerHAL to access powerhal folder
allow mtk_hal_power sdcard_type:dir create_dir_perms;
allow mtk_hal_power sdcard_type:file create_file_perms;
allow mtk_hal_power eemcs_device:chr_file rw_file_perms;
allow mtk_hal_power mnt_user_file:dir create_dir_perms;

allow mtk_hal_power mtk_powerhal_data_file:dir {create_dir_perms rw_dir_perms};
allow mtk_hal_power mtk_powerhal_data_file:file {create_file_perms rw_file_perms};
allow mtk_hal_power mtk_powerhal_data_file:sock_file {create_file_perms rw_file_perms};

#camera contorl cpu
allow mtk_hal_power mtk_hal_camera:dir { search getattr };
allow mtk_hal_power mtk_hal_camera:file { getattr open write read };

# Date : 2017/10/24
# Operation: SQC
# Purpose : Allow powerHAL to access thermal
allow mtk_hal_power proc_thermal:dir search;
allow mtk_hal_power sysfs:file {open write read};
allow mtk_hal_power debugfs_fpsgo:dir search;
allow mtk_hal_power debugfs_fpsgo:file { getattr open write read };

# Date : 2017/12/19
# Operation: SQC
# Purpose : Allow powerHAL to access wlan
allow mtk_hal_power proc_net:file {open write};

# Date : 2017/12/21
# Operation: SQC
# Purpose : Allow powerHAL to access mediacodec
allow mtk_hal_power mediacodec:dir search;
allow mtk_hal_power mediacodec:dir getattr;
allow mtk_hal_power mediacodec:file { getattr open write read };

set_prop(mtk_hal_power, mtk_thermal_config_prop)

# Date : 2018/01/31
# Operation: SQC
# Purpose : Allow powerHAL to access /proc/[pid]
allow mtk_hal_power su:dir { search getattr };
allow mtk_hal_power su:file { read open };

# Date : 2018/03/16
# Operation: SQC
# Purpose : Allow powerHAL to access /d/mtkfb
allow mtk_hal_power debugfs_fb:dir search;
allow mtk_hal_power debugfs_fb:file { getattr open read write };