ming-pei.hsu 23c057dc71 [ALPS03845186] Revise system app permission
Change set_prop to get_prop to avoid broken neverallow rule.

MTK-Commit-Id: a4efbfa70f98f2b2b4b02cc4a0d993e1a5940fa8

Change-Id: I3f39a92e2849575c3d89ff6d12b5c15ffe690aad
CR-Id: ALPS03845186
Feature: SIM
2020-01-18 09:57:29 +08:00

44 lines
1.4 KiB
Plaintext

# ==============================================
# MTK Policy Rule
# ==============================================
typeattribute system_app mlstrustedsubject;
# Date : 2017/07/21
# Purpose :[CdsInfo] read/ write WI-FI MAC address by NVRAM API
# Package Name: com.mediatek.connectivity
hal_client_domain(system_app, hal_nvramagent);
hal_client_domain(system_app, mtk_hal_lbs)
#Dat: 2017/02/14
#Purpose: allow set telephony Sensitive property
typeattribute system_app system_writes_vendor_properties_violators;
get_prop(system_app, mtk_telephony_sensitive_prop)
# Date : WK17.12
# Operation : MT6799 SQC
# Purpose : Change thermal config
allow system_app mtk_thermal_config_prop:file { getattr open read };
allow system_app mtk_thermal_config_prop:property_service set;
# Date : 2017/11/07
# Operation : Migration
# Purpose : CAT need copy exception db file from data folder
# Package: CAT tool
allow system_app aee_exp_data_file:file r_file_perms;
allow system_app aee_exp_data_file:dir r_dir_perms;
# Date : 2017/12/21
# Purpose : Allow system app to set persist.meta.connecttype for ATM
set_prop(system_app,meta_connecttype_prop);
# Date : 2017/12/21
# Purpose : Allow system app to set persist.atm.mdmode for ATM
set_prop(system_app,atm_mdmode_prop);
# Date : 2017/12/21
# Purpose : Allow system app to set persist.atm.ipaddress for ATM
set_prop(system_app,atm_ipaddr_prop);