722798a334
Some rules is no need any more, need to remove it. MTK-Commit-Id: 49685f1299d990a7195a2d54b955517d8f2cc699 Change-Id: I4a590ad781589cf94989ce72c88751ac10b82eae CR-Id: ALPS03982747 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
82 lines
2.0 KiB
Plaintext
82 lines
2.0 KiB
Plaintext
# ==============================================
|
|
# Policy File of /system/bin/em_svr Executable File
|
|
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
|
|
type em_svr_exec , exec_type, file_type;
|
|
typeattribute em_svr coredomain;
|
|
|
|
# ==============================================
|
|
# Android Policy Rule
|
|
# ==============================================
|
|
|
|
# ==============================================
|
|
# NSA Policy Rule
|
|
# ==============================================
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
|
|
init_daemon_domain(em_svr)
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for MD log filter
|
|
allow em_svr block_device:dir search;
|
|
allow em_svr sdcardfs:dir { search write add_name };
|
|
allow em_svr sdcardfs:file { write create open };
|
|
|
|
allow em_svr media_rw_data_file:dir { read write search open add_name };
|
|
allow em_svr media_rw_data_file:file { write create open };
|
|
|
|
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for controlling screen on/off
|
|
allow em_svr graphics_device:dir search;
|
|
allow em_svr graphics_device:chr_file { open read write ioctl };
|
|
allow em_svr surfaceflinger_service:service_manager find;
|
|
binder_use(em_svr)
|
|
binder_call(em_svr, surfaceflinger)
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for controlling backlight
|
|
allow em_svr sysfs_leds:dir search;
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for sensor calibration
|
|
allow em_svr self:capability { chown fsetid };
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for shell cmd
|
|
allow em_svr shell_exec:file { getattr execute read open execute_no_trans };
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for power battery charge/PMU
|
|
allow em_svr toolbox_exec:file { getattr execute read open execute_no_trans };
|
|
|
|
# Date: WK1812
|
|
# Purpose: sys file access
|
|
allow em_svr sysfs:dir { open read };
|
|
|
|
# Date: WK1822
|
|
# Purpose: battery temprature setting
|
|
allow em_svr sysfs_batteryinfo:dir search;
|
|
allow em_svr sysfs_batteryinfo:file { write open };
|
|
r_dir_file(em_svr, sysfs_batteryinfo);
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|