aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/dualmdlogger.te
diff options
context:
space:
mode:
Diffstat (limited to 'sepolicy/dualmdlogger.te')
-rw-r--r--sepolicy/dualmdlogger.te63
1 files changed, 63 insertions, 0 deletions
diff --git a/sepolicy/dualmdlogger.te b/sepolicy/dualmdlogger.te
new file mode 100644
index 0000000..01a8cfe
--- /dev/null
+++ b/sepolicy/dualmdlogger.te
@@ -0,0 +1,63 @@
+# ==============================================
+# Policy File of /system/bindualmdlogger Executable File
+
+
+# ==============================================
+# Type Declaration
+# ==============================================
+
+type dualmdlogger_exec , exec_type, file_type;
+type dualmdlogger ,domain;
+
+# ==============================================
+# Android Policy Rule
+# ==============================================
+
+# ==============================================
+# NSA Policy Rule
+# ==============================================
+
+# ==============================================
+# MTK Policy Rule
+# ==============================================
+
+#permissive dualmdlogger;
+init_daemon_domain(dualmdlogger)
+
+
+#=============allow mdlogger to set ==============
+allow dualmdlogger debug_mdlogger_prop:property_service set;
+allow dualmdlogger debug_prop:property_service set;
+allow dualmdlogger ccci_device:chr_file { read write ioctl open };
+allow dualmdlogger ttyGS_device:chr_file { read write open ioctl};
+allow dualmdlogger fuse:dir { write search create rmdir add_name remove_name read open rename};
+allow dualmdlogger fuse:file { write read create open rename unlink getattr setattr append};
+allow dualmdlogger mdlog_data_file:dir { write search read create open rmdir remove_name add_name relabelto getattr};
+allow dualmdlogger mdlog_data_file:fifo_file { read open create setattr};
+allow dualmdlogger mdlog_data_file:file { write read create open rename unlink getattr setattr};
+allow dualmdlogger mdlog_device:chr_file { read write open ioctl};
+allow dualmdlogger system_data_file:dir { write create open add_name relabelfrom};
+
+allow dualmdlogger init:unix_stream_socket connectto;
+allow dualmdlogger property_socket:sock_file write;
+allow dualmdlogger platform_app:unix_stream_socket connectto;
+
+allow dualmdlogger shell_exec:file { read execute open execute_no_trans };
+allow dualmdlogger system_file:file execute_no_trans;
+allow dualmdlogger zygote_exec:file { read getattr open execute execute_no_trans };
+allow dualmdlogger tmpfs:lnk_file read;
+
+#============= dualmdlogger usb logging ==============
+# Date : 2014/09/26
+# Operation : Migration
+# Purpose : [DUALMDLOGGER] [dualmdlogger usb logging tcp_socket]
+# Package: system/bin/dualmdlogger
+
+allow dualmdlogger fuse:dir search;
+allow dualmdlogger node:tcp_socket node_bind;
+allow dualmdlogger port:tcp_socket name_bind;
+allow dualmdlogger self:tcp_socket { write read bind create setopt accept listen };
+
+
+binder_use(dualmdlogger)
+binder_service(dualmdlogger)