diff options
Diffstat (limited to 'sepolicy/cmddumper.te')
| -rw-r--r-- | sepolicy/cmddumper.te | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/sepolicy/cmddumper.te b/sepolicy/cmddumper.te new file mode 100644 index 0000000..f605d3c --- /dev/null +++ b/sepolicy/cmddumper.te @@ -0,0 +1,35 @@ +# ============================================== +# Policy File of /system/bin/cmddumper Executable File + +# ============================================== +# Type Declaration +# ============================================== +type cmddumper, domain; +type cmddumper_exec, exec_type, file_type; + +# ============================================== +# MTK Policy Rule +# ============================================== +init_daemon_domain(cmddumper) + +#============= cmddumper ============== +allow cmddumper mdlog_data_file:fifo_file create_file_perms; +allow cmddumper mdlog_data_file:file create_file_perms; +allow cmddumper mdlog_data_file:dir { create_dir_perms relabelto }; +allow cmddumper ttySDIO_device:chr_file { read write ioctl open }; +allow cmddumper fuse:dir create_dir_perms; +allow cmddumper fuse:file create_file_perms; + +allow cmddumper init:unix_stream_socket connectto; +allow cmddumper property_socket:sock_file { write read }; +allow cmddumper platform_app:unix_stream_socket connectto; + +allow cmddumper shell_exec:file { read execute open execute_no_trans }; +allow cmddumper system_file:file execute_no_trans; + +allow cmddumper debug_mdlogger_prop:property_service set; +allow cmddumper debug_prop:property_service set; + +allow cmddumper tmpfs:lnk_file read; +allow cmddumper system_data_file:dir { write create open add_name relabelfrom relabelto}; + |