4a346a24a8
add map policy for stp_dump, stpwmt_device MTK-Commit-Id: f49e856a8cbe3813d9e177345ce18ae1b61e89b7 Change-Id: Ib76f0cb54e7dc363da194686aec4724b6b4c1fad Signed-off-by: Johnny Yao <johnny.yao@mediatek.com> CR-Id: ALPS04667511 Feature: [Module]WMT Driver
45 lines
1.9 KiB
Plaintext
45 lines
1.9 KiB
Plaintext
# ==============================================
|
|
# Policy File of /system/binstp_dump3 Executable File
|
|
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
|
|
type stp_dump3_exec, vendor_file_type, exec_type, file_type;
|
|
type stp_dump3, domain;
|
|
|
|
# ==============================================
|
|
# Android Policy Rule
|
|
# ==============================================
|
|
|
|
# ==============================================
|
|
# NSA Policy Rule
|
|
# ==============================================
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
file_type_auto_trans(stp_dump3,vendor_data_file,stp_dump_data_file)
|
|
allow stp_dump3 self:capability { net_admin fowner chown fsetid };
|
|
allow stp_dump3 self:netlink_socket { read write getattr bind create setopt };
|
|
allow stp_dump3 self:netlink_generic_socket { read write getattr bind create setopt };
|
|
allow stp_dump3 wmtdetect_device:chr_file { read write ioctl open };
|
|
allow stp_dump3 stpwmt_device:chr_file rw_file_perms;
|
|
allow stp_dump3 tmpfs:lnk_file r_file_perms;
|
|
allow stp_dump3 tmpfs:lnk_file read;
|
|
allow stp_dump3 mnt_user_file:dir search;
|
|
allow stp_dump3 mnt_user_file:lnk_file read;
|
|
allow stp_dump3 storage_file:lnk_file read;
|
|
allow stp_dump3 sdcard_type:dir search;
|
|
allow stp_dump3 sdcard_type:dir {open read write create setattr getattr add_name remove_name search};
|
|
allow stp_dump3 sdcard_type:file { open read write create setattr getattr append unlink rename};
|
|
allow stp_dump3 sdcard_type:file create_file_perms;
|
|
allow stp_dump3 stp_dump_data_file:dir create_dir_perms;
|
|
allow stp_dump3 stp_dump_data_file:file create_file_perms;
|
|
allow stp_dump3 connsyslog_data_vendor_file:dir create_dir_perms;
|
|
allow stp_dump3 connsyslog_data_vendor_file:file create_file_perms;
|
|
allow stp_dump3 vendor_data_file:dir create_dir_perms;
|
|
get_prop(stp_dump3, coredump_prop)
|
|
init_daemon_domain(stp_dump3)
|