37e0caa36e
Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
43 lines
1.3 KiB
Plaintext
43 lines
1.3 KiB
Plaintext
# ==============================================
|
|
# Policy File of /vendor/bin/sysenv_daemon Executable File
|
|
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
|
|
type sysenv_daemon_exec , exec_type, file_type, vendor_file_type;
|
|
type sysenv_daemon ,domain;
|
|
|
|
# ==============================================
|
|
# Android Policy Rule
|
|
# ==============================================
|
|
|
|
# ==============================================
|
|
# NSA Policy Rule
|
|
# ==============================================
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
init_daemon_domain(sysenv_daemon)
|
|
|
|
# Date : WK16.24
|
|
# Operation : Create
|
|
# Purpose : move sysenv to userspace.
|
|
allow sysenv_daemon block_device:dir search;
|
|
allow sysenv_daemon para_block_device:blk_file rw_file_perms;
|
|
allow sysenv_daemon proc_lk_env:file rw_file_perms;
|
|
allow sysenv_daemon self:netlink_socket { read bind create };
|
|
|
|
# Date : WK17.29
|
|
# Operation : Migration
|
|
# Purpose : for device bring up, not to block early SQC
|
|
allow sysenv_daemon sysfs:file { open read };
|
|
|
|
# Date : WK17.43
|
|
# Operation : Migration
|
|
# Purpose : to access mtd device
|
|
allow sysenv_daemon mtd_device:blk_file { open read write };
|
|
|