8183941448
[Detail] 1. Change type name from sysfs_boot to sysfs_boot_mode 2. Add type name sysfs_boot_type MTK-Commit-Id: 54d5bb31fc8ad1d9ac2e931fe5dc01ef4c1083cf Change-Id: I445ecdf5a5e334a49ccc1d747daa87f6be351d20 Signed-off-by: Peter Wang <peter.wang@mediatek.com> CR-Id: ALPS03901606 Feature: UFS Booting
85 lines
3.3 KiB
Plaintext
Executable File
85 lines
3.3 KiB
Plaintext
Executable File
|
|
# Policy File of /vendor/bin/connsyslogger Executable File
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
type connsyslogger,domain;
|
|
type connsyslogger_exec, exec_type, file_type, vendor_file_type;
|
|
typeattribute connsyslogger mlstrustedsubject;
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
init_daemon_domain(connsyslogger)
|
|
|
|
|
|
#allow connsyslogger to set property
|
|
allow connsyslogger vendor_consyslogger_prop:property_service set;
|
|
#allow connsyslogger debug_prop:property_service set;
|
|
allow connsyslogger persist_mtklog_prop:property_service set;
|
|
#allow connsyslogger system_radio_prop:property_service set;
|
|
|
|
#stpwmt device for connsyslogger
|
|
allow connsyslogger stpwmt_device:chr_file { rw_file_perms };
|
|
|
|
|
|
#for logging sdcard access
|
|
allow connsyslogger fuse:dir { create_dir_perms };
|
|
allow connsyslogger fuse:file { create_file_perms };
|
|
|
|
#consys logger access on /data/consyslog
|
|
allow connsyslogger consyslog_data_file:dir { create_dir_perms relabelto };
|
|
allow connsyslogger consyslog_data_file:fifo_file { create_file_perms };
|
|
allow connsyslogger consyslog_data_file:file { create_file_perms };
|
|
#allow connsyslogger system_data_file:dir { create_dir_perms relabelfrom};
|
|
|
|
#file_type_auto_trans(connsyslogger, system_data_file, consyslog_data_file)
|
|
|
|
#consys logger socket access
|
|
allow connsyslogger property_socket:sock_file write;
|
|
allow connsyslogger init:unix_stream_socket connectto;
|
|
#allow connsyslogger platform_app:unix_stream_socket connectto;
|
|
#allow connsyslogger shell_exec:file { rx_file_perms };
|
|
#allow connsyslogger system_file:file execute_no_trans;
|
|
#allow connsyslogger zygote_exec:file { rx_file_perms };
|
|
|
|
allow connsyslogger tmpfs:lnk_file { create_file_perms };
|
|
|
|
# purpose: avc: denied { read } for name="plat_file_contexts"
|
|
allow connsyslogger file_contexts_file:file { read getattr open };
|
|
|
|
#logger SD logging in factory mode
|
|
allow connsyslogger vfat:dir create_dir_perms;
|
|
allow connsyslogger vfat:file create_file_perms;
|
|
|
|
#logger permission in storage in android M version
|
|
allow connsyslogger mnt_user_file:dir search;
|
|
allow connsyslogger mnt_user_file:lnk_file read;
|
|
allow connsyslogger storage_file:lnk_file read;
|
|
#allow connsyslogger self:capability { chown dac_override };
|
|
allow connsyslogger proc:file {setattr write read open};
|
|
|
|
#permission for use SELinux API
|
|
allow connsyslogger rootfs:file r_file_perms;
|
|
|
|
#permission for storage access storage
|
|
allow connsyslogger storage_file:dir { create_dir_perms };
|
|
allow connsyslogger storage_file:file { create_file_perms };
|
|
|
|
#permission for read boot mode
|
|
allow connsyslogger sysfs_boot_mode:file { read open };
|
|
|
|
allow connsyslogger fw_log_wifi_device:chr_file {read write open ioctl};
|
|
allow connsyslogger fw_log_bt_device:chr_file {read write open ioctl};
|
|
allow connsyslogger fw_log_gps_device:chr_file {read write open ioctl};
|
|
allow connsyslogger fw_log_wmt_device:chr_file {read write open ioctl};
|
|
|
|
allow connsyslogger sdcardfs:dir { create_dir_perms };
|
|
allow connsyslogger sdcardfs:file { create_file_perms };
|
|
allow connsyslogger rootfs:lnk_file getattr;
|
|
|
|
typeattribute connsyslogger data_between_core_and_vendor_violators;
|
|
#allow connsyslogger media_rw_data_file:file { create_file_perms };
|
|
#allow connsyslogger media_rw_data_file:dir { create_dir_perms };
|