yuhui.zhang 7952f3fc53 [ALPS03914002] Add sepolicy rule for EM
[Detail]
1. Add SEPolicy rule for battery log
2. Add SEPolicy rule for EM setting property

MTK-Commit-Id: e59cf4c98b75739a0e2e58f098174747951bda5d

Change-Id: Ic6cc12fe0a26d2fad5dd6196d598a21fd96b25cb
CR-Id: ALPS03914002
Feature: Engineering Mode
2020-01-18 09:57:40 +08:00

83 lines
2.0 KiB
Plaintext

# ==============================================
# Policy File of /system/bin/em_svr Executable File
# ==============================================
# Type Declaration
# ==============================================
type em_svr_exec , exec_type, file_type;
typeattribute em_svr coredomain;
# ==============================================
# Android Policy Rule
# ==============================================
# ==============================================
# NSA Policy Rule
# ==============================================
# ==============================================
# MTK Policy Rule
# ==============================================
init_daemon_domain(em_svr)
# Date: WK1812
# Purpose: add for MD log filter
allow em_svr block_device:dir search;
allow em_svr sdcardfs:dir { search write add_name };
allow em_svr sdcardfs:file { write create open };
allow em_svr media_rw_data_file:dir { read write search open add_name };
allow em_svr media_rw_data_file:file { write create open };
# Date: WK1812
# Purpose: add for controlling screen on/off
allow em_svr graphics_device:dir search;
allow em_svr graphics_device:chr_file { open read write ioctl };
allow em_svr surfaceflinger_service:service_manager find;
binder_use(em_svr)
binder_call(em_svr, surfaceflinger)
# Date: WK1812
# Purpose: add for controlling backlight
allow em_svr sysfs_leds:dir search;
# Date: WK1812
# Purpose: add for sensor calibration
#allow em_svr self:capability { dac_read_search dac_override chown fsetid };
# Date: WK1812
# Purpose: add for shell cmd
allow em_svr shell_exec:file { getattr execute read open execute_no_trans };
# Date: WK1812
# Purpose: add for power battery charge/PMU
allow em_svr toolbox_exec:file { getattr execute read open execute_no_trans };
# Date: WK1812
# Purpose: sys file access
allow em_svr sysfs:dir { open read };
# Date: WK1822
# Purpose: battery temprature setting
allow em_svr sysfs_batteryinfo:dir search;
allow em_svr sysfs_batteryinfo:file { write open };