6878563342
[Detail] The P version change nvdata path to /mnt/vendor/nvdata. If want to open fstab when using nvram function, it needs search policy. [Solution] allow xxx mnt_vendor_file:dir search MTK-Commit-Id: a34d6ff7cf3b1545014a45f5052f7dbddf93808a Change-Id: I2730d51963d3859008b4a53f06329ef0a23eb8f4 CR-Id: ALPS03841839 Feature: NVRAM Partition
97 lines
3.4 KiB
Plaintext
97 lines
3.4 KiB
Plaintext
# ==============================================
|
|
# Policy File of /system/bin/fuelgauged Executable File
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
type fuelgauged ,domain;
|
|
type fuelgauged_exec , exec_type, file_type, vendor_file_type;
|
|
type fuelgauged_file, file_type, data_file_type;
|
|
|
|
# ==============================================
|
|
# Android Policy Rule
|
|
# ==============================================
|
|
|
|
# ==============================================
|
|
# NSA Policy Rule
|
|
# ==============================================
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
|
|
init_daemon_domain(fuelgauged)
|
|
|
|
# Data : WK14.43
|
|
# Operation : Migration
|
|
# Purpose : Fuel Gauge daemon for access driver node
|
|
allow fuelgauged input_device:dir rw_dir_perms;
|
|
allow fuelgauged input_device:file r_file_perms;
|
|
|
|
# Data : WK14.43
|
|
# Operation : Migration
|
|
# Purpose : For meta tool calibration
|
|
allow fuelgauged mtk-adc-cali_device:chr_file rw_file_perms;
|
|
|
|
# Data : WK14.43
|
|
# Operation : Migration
|
|
# Purpose : For fg.log can be printed with kernel log
|
|
allow fuelgauged kmsg_device:chr_file w_file_perms;
|
|
|
|
# Data : WK14.43
|
|
# Operation : Migration
|
|
# Purpose : For fg daemon can comminucate with kernel
|
|
### TBD, neverallowxperm on line 177 of system/sepolicy/public/domain.t
|
|
#allow fuelgauged fuelgauged:netlink_kobject_uevent_socket create_socket_perms;
|
|
#allow fuelgauged fuelgauged:netlink_socket create_socket_perms;
|
|
allow fuelgauged self:netlink_socket create;
|
|
allow fuelgauged self:netlink_socket create_socket_perms_no_ioctl;
|
|
allow fuelgauged self:netlink_route_socket { bind create getattr write nlmsg_read read nlmsg_write };
|
|
|
|
# Data : WK16.21
|
|
# Operation : New Feature
|
|
# Purpose : For fg daemon can access /data/FG folder
|
|
#file_type_auto_trans(fuelgauged, system_data_file, fuelgauged_file);
|
|
#allow fuelgauged fuelgauged_file:file rw_file_perms;
|
|
#allow fuelgauged system_data_file:dir rw_dir_perms;
|
|
|
|
# Data : WK16.21
|
|
# Operation : New Feature
|
|
# Purpose : For fg daemon can do nvram r/w to save car_tune_value
|
|
#allow fuelgauged nvdata_file:dir rw_dir_perms;
|
|
#allow fuelgauged nvdata_file:file {rw_file_perms create_file_perms};
|
|
#allow fuelgauged nvram_data_file:lnk_file rw_file_perms;
|
|
#allow fuelgauged nvdata_file:lnk_file rw_file_perms;
|
|
|
|
# Data : WK16.39
|
|
#allow fuelgauged self:capability { chown fsetid dac_override };
|
|
|
|
# Data : W16.43
|
|
# Operation : New Feature
|
|
# Purpose : Change from /data to /cache
|
|
#allow fuelgauged cache_file:file {rw_file_perms create_file_perms};
|
|
#allow fuelgauged cache_file:dir {rw_dir_perms create_dir_perms};
|
|
#allow fuelgauged sysfs:file {rw_file_perms create_file_perms};
|
|
|
|
# Date: W17.22
|
|
# Operation : New Feature
|
|
# Purpose : Add for A/B system
|
|
allow fuelgauged kernel:system module_request;
|
|
|
|
# Date: W18.03
|
|
# Operation : change fuelgagued access from cache to nvcfg
|
|
# Purpose : add fuelgauged to nvcfg read write permit
|
|
allow fuelgauged nvcfg_file:dir { search write open read add_name create getattr};
|
|
allow fuelgauged nvcfg_file:file { read write getattr open create };
|
|
|
|
# Date: W18.17
|
|
# Operation : add label for /sys/devices/platform/battery(/.*)
|
|
# Purpose : add fuelgauged could access
|
|
r_dir_file(fuelgauged, sysfs_batteryinfo);
|
|
|
|
# Date : WK18.21
|
|
# Operation: P migration
|
|
# Purpose: Allow to search /mnt/vendor/nvdata for fstab when using NVM_Init()
|
|
allow fuelgauged mnt_vendor_file:dir search;
|
|
|