android_device_mediatek_sepolicy/plat_private/em_svr.te

# ==============================================
# Policy File of /system/bin/em_svr Executable File


# ==============================================
# Type Declaration
# ==============================================

type em_svr_exec , exec_type, file_type;
typeattribute em_svr coredomain;

# ==============================================
# Android Policy Rule
# ==============================================

# ==============================================
# NSA Policy Rule
# ==============================================

# ==============================================
# MTK Policy Rule
# ==============================================

init_daemon_domain(em_svr)

# Date: WK1812
# Purpose: add for MD log filter
allow em_svr block_device:dir search;
allow em_svr sdcardfs:dir { search write add_name };
allow em_svr sdcardfs:file { write create open };

allow em_svr media_rw_data_file:dir { read write search open add_name };
allow em_svr media_rw_data_file:file { write create open };



# Date: WK1812
# Purpose: add for controlling screen on/off
allow em_svr graphics_device:dir search;
allow em_svr graphics_device:chr_file { open read write ioctl };
allow em_svr surfaceflinger_service:service_manager find;
binder_use(em_svr)
binder_call(em_svr, surfaceflinger)

# Date: WK1812
# Purpose: add for controlling backlight
allow em_svr sysfs_leds:dir search;

# Date: WK1812
# Purpose: add for sensor calibration
#allow em_svr self:capability { dac_read_search dac_override chown fsetid };

# Date: WK1812
# Purpose: add for shell cmd
allow em_svr shell_exec:file { getattr execute read open execute_no_trans };

# Date: WK1812
# Purpose: add for power battery charge/PMU
allow em_svr toolbox_exec:file { getattr execute read open execute_no_trans };

# Date: WK1812
# Purpose: sys file access
#allow em_svr sysfs:file { getattr read write open };
allow em_svr sysfs:dir { open read };

# Date: WK1812
# Purpose: proc file access
#allow em_svr proc:file { getattr open read write };