Tim Chang 34b44eba7d [ALPS04056430] Add get_prop to stp_dump3.te
It is necessary to add get_prop in stp_dump3.te in order to
read coredump property.

MTK-Commit-Id: 7003dc630f9ef490011f26fca3ef2562545b81cb

Change-Id: I11c251ac6111a08b4f7748443e55ee3987198e08
CR-Id: ALPS04056430
Feature: [Module]WMT Driver
2020-01-18 10:07:32 +08:00

47 lines
2.1 KiB
Plaintext

# ==============================================
# Policy File of /system/binstp_dump3 Executable File
# ==============================================
# Type Declaration
# ==============================================
type stp_dump3_exec, exec_type, file_type;
type stp_dump3, domain;
typeattribute stp_dump3 coredomain;
# ==============================================
# Android Policy Rule
# ==============================================
# ==============================================
# NSA Policy Rule
# ==============================================
# ==============================================
# MTK Policy Rule
# ==============================================
file_type_auto_trans(stp_dump3,system_data_file,stp_dump_data_file)
allow stp_dump3 self:capability { net_admin fowner chown fsetid };
allow stp_dump3 self:netlink_socket { read write getattr bind create setopt };
allow stp_dump3 self:netlink_generic_socket { read write getattr bind create setopt };
allow stp_dump3 media_rw_data_file:dir { add_name setattr };
allow stp_dump3 media_rw_data_file:dir rmdir;
allow stp_dump3 media_rw_data_file:dir { open read write create setattr getattr add_name remove_name search};
allow stp_dump3 media_rw_data_file:file { open read write create setattr getattr append unlink rename};
allow stp_dump3 wmtdetect_device:chr_file { read write ioctl open };
allow stp_dump3 stpwmt_device:chr_file { read write ioctl open };
allow stp_dump3 tmpfs:lnk_file r_file_perms;
allow stp_dump3 tmpfs:lnk_file read;
allow stp_dump3 mnt_user_file:dir search;
allow stp_dump3 mnt_user_file:lnk_file read;
allow stp_dump3 storage_file:lnk_file read;
allow stp_dump3 sdcard_type:dir search;
allow stp_dump3 sdcard_type:dir {open read write create setattr getattr add_name remove_name search};
allow stp_dump3 sdcard_type:file { open read write create setattr getattr append unlink rename};
allow stp_dump3 sdcard_type:file create_file_perms;
allow stp_dump3 stp_dump_data_file:dir create_dir_perms;
allow stp_dump3 stp_dump_data_file:file create_file_perms;
get_prop(stp_dump3, coredump_prop)
init_daemon_domain(stp_dump3)