5849c224e3
1. Mark polices which accessing proc/sysfs file system
2. Add violator attribute to modules violate vendor/system rule.
MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8
Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
86 lines
2.6 KiB
Plaintext
86 lines
2.6 KiB
Plaintext
# ==============================================
|
|
# MTK Policy Rule for vendor
|
|
# ==============================================
|
|
|
|
# Data : WK14.39
|
|
# Operation : Migration
|
|
# Purpose : dump for debug
|
|
allow audioserver audiohal_prop:property_service set;
|
|
|
|
# Date: WK14.44
|
|
# Operation : Migration
|
|
# Purpose : EVDO
|
|
allow audioserver rpc_socket:sock_file write;
|
|
allow audioserver ttySDIO_device:chr_file rw_file_perms;
|
|
|
|
# Data: WK14.44
|
|
# Operation : Migration
|
|
# Purpose : for low SD card latency issue
|
|
#allow audioserver sysfs_lowmemorykiller:file { read open };
|
|
|
|
# Data: WK14.45
|
|
# Operation : Migration
|
|
# Purpose : for change thermal policy when needed
|
|
allow audioserver proc_mtkcooler:dir search;
|
|
allow audioserver proc_mtktz:dir search;
|
|
allow audioserver proc_thermal:dir search;
|
|
typeattribute audioserver data_between_core_and_vendor_violators;
|
|
allow audioserver thermal_manager_data_file:file create_file_perms;
|
|
allow audioserver thermal_manager_data_file:dir { rw_dir_perms setattr };
|
|
|
|
# Date : WK15.03
|
|
# Operation : Migration
|
|
# Purpose : offloadservice
|
|
allow audioserver offloadservice_device:chr_file rw_file_perms;
|
|
|
|
# Date : WK16.17
|
|
# Operation : Migration
|
|
# Purpose: read/open sysfs node
|
|
#allow audioserver sysfs_ccci:file r_file_perms;
|
|
|
|
# Date : WK16.18
|
|
# Operation : Migration
|
|
# Purpose: research root dir "/"
|
|
allow audioserver tmpfs:dir search;
|
|
|
|
# Date : WK16.18
|
|
# Operation : Migration
|
|
# Purpose: access sysfs node
|
|
#allow audioserver sysfs:file { open read write };
|
|
allow audioserver sysfs_ccci:dir search;
|
|
|
|
# Purpose: Dump debug info
|
|
allow audioserver debugfs_binder:dir search;
|
|
allow audioserver fuse:file write;
|
|
|
|
# Date : WK16.33
|
|
# Purpose: Allow to access ged for gralloc_extra functions
|
|
allow audioserver proc_ged:file {open read write ioctl getattr};
|
|
|
|
# Date : WK16.48
|
|
# Purpose: Allow to trigger AEE dump
|
|
allow audioserver aee_aed:unix_stream_socket connectto;
|
|
|
|
# Date : WK17.28
|
|
# Operation : MT6757 SQC
|
|
# Purpose : Change thermal config
|
|
allow audioserver mtk_thermal_config_prop:file { getattr open read };
|
|
allow audioserver mtk_thermal_config_prop:property_service set;
|
|
|
|
# Date : WK17.42
|
|
# Operation : MT6737m CTS
|
|
# Purpose : Read compensation filter parameter from nvram data
|
|
allow audioserver nvdata_file:dir r_dir_perms;
|
|
allow audioserver nvdata_file:file r_file_perms;
|
|
|
|
# Date : WK17.42
|
|
# Operation : ALPS03606059
|
|
allow audioserver mtk_audiohal_data_file:dir r_dir_perms;
|
|
|
|
# Date : WK17.49
|
|
# Operation : Migration
|
|
# Purpose : Read audio loudness parameter from nvram data
|
|
allow audioserver nvdata_file:dir write;
|
|
allow audioserver nvram_data_file:dir w_dir_perms;
|
|
allow audioserver nvram_data_file:file create_file_perms;
|
|
allow audioserver nvram_data_file:lnk_file read; |