aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/ccci_fsd.te
diff options
context:
space:
mode:
Diffstat (limited to 'sepolicy/ccci_fsd.te')
-rw-r--r--sepolicy/ccci_fsd.te48
1 files changed, 48 insertions, 0 deletions
diff --git a/sepolicy/ccci_fsd.te b/sepolicy/ccci_fsd.te
new file mode 100644
index 0000000..2703f56
--- /dev/null
+++ b/sepolicy/ccci_fsd.te
@@ -0,0 +1,48 @@
+# ==============================================
+# Policy File of /system/binccci_fsd Executable File
+
+
+# ==============================================
+# Type Declaration
+# ==============================================
+
+type ccci_fsd_exec, exec_type, file_type;
+type ccci_fsd, domain;
+
+# ==============================================
+# Android Policy Rule
+# ==============================================
+
+# ==============================================
+# NSA Policy Rule
+# ==============================================
+
+# ==============================================
+# MTK Policy Rule
+# ==============================================
+
+#permissive ccci_fsd;
+init_daemon_domain(ccci_fsd)
+#unconfined_domain(ccci_fsd)
+
+wakelock_use(ccci_fsd)
+
+allow ccci_fsd nvram_data_file:dir create_dir_perms;
+allow ccci_fsd nvram_data_file:file create_file_perms;
+allow ccci_fsd nvram_data_file:lnk_file read;
+allow ccci_fsd nvdata_file:dir create_dir_perms;
+allow ccci_fsd nvdata_file:file create_file_perms;
+allow ccci_fsd ccci_device:chr_file rw_file_perms;
+allow ccci_fsd ccci_cfg_file:dir create_dir_perms;
+allow ccci_fsd ccci_cfg_file:file create_file_perms;
+#============= ccci_fsd ==============
+allow ccci_fsd protect_f_data_file:dir create_dir_perms;
+allow ccci_fsd protect_f_data_file:file create_file_perms;
+
+allow ccci_fsd protect_s_data_file:dir create_dir_perms;
+allow ccci_fsd protect_s_data_file:file create_file_perms;
+
+allow ccci_fsd otp_device:chr_file rw_file_perms;
+allow ccci_fsd block_device:dir search;
+allow ccci_fsd platformblk_device:blk_file { read write open ioctl };
+allow ccci_fsd platformblk_device:dir { search }; \ No newline at end of file