722798a334
Some rules is no need any more, need to remove it. MTK-Commit-Id: 49685f1299d990a7195a2d54b955517d8f2cc699 Change-Id: I4a590ad781589cf94989ce72c88751ac10b82eae CR-Id: ALPS03982747 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
41 lines
1.7 KiB
Plaintext
41 lines
1.7 KiB
Plaintext
# =============================================================================
|
|
# MTK Policy Rule
|
|
# =============================================================================
|
|
|
|
# New added for move to /system
|
|
type thermalindicator_exec, exec_type, file_type;
|
|
typeattribute thermalindicator coredomain;
|
|
|
|
init_daemon_domain(thermalindicator)
|
|
|
|
allow thermalindicator gpu_device:chr_file { getattr read write ioctl open };
|
|
allow thermalindicator surfaceflinger:fd use;
|
|
allow thermalindicator surfaceflinger:binder call;
|
|
allow thermalindicator surfaceflinger:binder transfer;
|
|
allow thermalindicator surfaceflinger_service:service_manager find;
|
|
allow thermalindicator servicemanager:binder call;
|
|
allow thermalindicator property_socket:sock_file write;
|
|
allow thermalindicator init:unix_stream_socket connectto;
|
|
|
|
allow surfaceflinger thermalindicator:fd use;
|
|
allow surfaceflinger thermalindicator:binder call;
|
|
allow surfaceflinger thermalindicator:binder transfer;
|
|
allow surfaceflinger thermalindicator:file { getattr read open };
|
|
allow surfaceflinger thermalindicator:dir search;
|
|
|
|
allow servicemanager thermalindicator:dir search;
|
|
allow servicemanager thermalindicator:file { read open };
|
|
allow servicemanager thermalindicator:process { getattr };
|
|
|
|
# For /proc/[pid]/cmdline accessing
|
|
typeattribute thermalindicator mlstrustedsubject;
|
|
|
|
allow thermalindicator proc:dir {search getattr};
|
|
allow thermalindicator shell:dir search;
|
|
allow thermalindicator platform_app:dir search;
|
|
allow thermalindicator platform_app:file {open read getattr};
|
|
allow thermalindicator untrusted_app:dir search;
|
|
allow thermalindicator untrusted_app:file {open read getattr};
|
|
allow thermalindicator mediaserver:dir search;
|
|
allow thermalindicator mediaserver:file {open read getattr};
|