1 files changed, 139 insertions, 0 deletions
diff --git a/sepolicy/factory.te b/sepolicy/factory.te
new file mode 100644
index 0000000..c3a105a
--- /dev/null
+++ b/sepolicy/factory.te
@@ -0,0 +1,139 @@
+# ==============================================
+# Policy File of /system/binfactory Executable File 
+
+
+# ==============================================
+# Type Declaration
+# ==============================================
+
+type factory_exec , exec_type, file_type;
+type factory ,domain;
+
+# ==============================================
+# Android Policy Rule
+# ==============================================
+
+# ==============================================
+# NSA Policy Rule
+# ==============================================
+
+# ==============================================
+# MTK Policy Rule
+# ==============================================
+
+#permissive factory;
+init_daemon_domain(factory)
+#unconfined_domain(factory)
+
+#============= factory ==============
+allow factory FM50AF_device:chr_file { read write ioctl open };
+allow factory AD5820AF_device:chr_file { read write ioctl open };
+allow factory DW9714AF_device:chr_file { read write ioctl open };
+allow factory DW9714A_device:chr_file { read write ioctl open };
+allow factory LC898122AF_device:chr_file { read write ioctl open };
+allow factory LC898212AF_device:chr_file { read write ioctl open };
+allow factory BU6429AF_device:chr_file { read write ioctl open };
+allow factory DW9718AF_device:chr_file { read write ioctl open };
+allow factory BU64745GWZAF_device:chr_file { read write ioctl open };
+# Camera bu64245
+allow factory BU64245_device:chr_file { read write ioctl open };
+allow factory MTK_SMI_device:chr_file { read ioctl open };
+allow factory accdet_device:chr_file { read ioctl open };
+allow factory als_ps_device:chr_file { read ioctl open };
+allow factory ashmem_device:chr_file execute;
+allow factory audio_device:chr_file { read write ioctl open };
+allow factory camera_isp_device:chr_file { read write ioctl open };
+allow factory camera_pipemgr_device:chr_file { read ioctl open };
+allow factory camera_sysram_device:chr_file { read ioctl open };
+allow factory ccci_device:chr_file { read write ioctl open };
+allow factory MT_pmic_cali_device:chr_file { read ioctl open };
+allow factory barometer_device:chr_file { read ioctl open };
+allow factory mtk_kpd_device:chr_file { read ioctl open };
+allow factory ebc_device:chr_file { read write open };
+allow factory fm_device:chr_file { read write ioctl open };
+allow factory fuse:dir { read search open };
+allow factory gps_device:chr_file { read write open };
+allow factory graphics_device:chr_file { read write ioctl open };
+allow factory gsensor_device:chr_file { read ioctl open };
+allow factory gsm0710muxd_device:chr_file { read write ioctl open };
+allow factory gyroscope_device:chr_file { read ioctl open };
+allow factory init:unix_stream_socket connectto;
+allow factory input_device:chr_file { read ioctl open };
+allow factory input_device:dir { read open };
+allow factory kd_camera_flashlight_device:chr_file { read write ioctl open };
+allow factory kd_camera_hw_device:chr_file { read write ioctl open };
+allow factory kernel:system module_request;
+allow factory misc_sd_device:chr_file { read ioctl open };
+allow factory mnld_device:chr_file { read write ioctl open };
+allow factory mnld_exec:file { read execute open execute_no_trans };
+allow factory msensor_device:chr_file { read ioctl open };
+allow factory mt6605_device:chr_file { read write ioctl open getattr };
+allow factory node:tcp_socket node_bind;
+allow factory nvram_data_file:dir { write read open add_name getattr setattr};
+allow factory nvram_data_file:file { write getattr setattr read create open };
+allow factory nvram_device:chr_file { read write ioctl open };
+allow factory platformblk_device:blk_file { read write open ioctl};
+allow factory self:capability sys_boot;
+allow factory platformblk_device:dir search;
+allow factory port:tcp_socket { name_bind name_connect };
+allow factory property_socket:sock_file write;
+allow factory rtc_device:chr_file { read write ioctl open };
+allow factory self:capability { sys_module ipc_lock sys_nice dac_override net_raw fsetid net_admin sys_time };
+allow factory self:netlink_route_socket { bind create };
+allow factory self:process execmem;
+allow factory self:tcp_socket { setopt read bind create accept write connect listen };
+allow factory self:udp_socket { create ioctl };
+allow factory stpbt_device:chr_file { read write open };
+allow factory sysfs:file write;
+allow factory sysfs_wake_lock:file { read write open };
+allow factory system_data_file:dir { write remove_name add_name };
+allow factory system_data_file:sock_file { write create setattr };
+allow factory system_file:file execute_no_trans;
+allow factory tmpfs:lnk_file read;
+allow factory ttyGS_device:chr_file { read write open };
+allow factory wmtWifi_device:chr_file { write open };
+allow factory nvram_data_file:dir { create_dir_perms };
+allow factory nvram_data_file:file { create_file_perms };
+allow factory nvram_data_file:lnk_file read;
+allow factory nvdata_file:dir { create_dir_perms };
+allow factory nvdata_file:file { create_file_perms };
+allow factory self:capability { sys_nice sys_time };
+allow factory system_data_file:dir { write add_name };
+allow factory rootfs:dir mounton;
+allow factory vfat:dir { read open search mounton };
+allow factory vfat:filesystem { mount unmount };
+allow factory block_device:dir search;
+allow factory graphics_device:dir search;
+allow factory input_device:dir search;
+allow factory self:capability sys_admin;
+allow factory self:capability sys_boot;
+allow factory labeledfs:filesystem unmount;
+allow factory platformblk_device:blk_file { getattr ioctl };
+allow factory shell_exec:file execute;
+allow factory MT_pmic_adc_cali_device:chr_file { read write ioctl open};
+allow factory audio_device:dir search;
+allow factory nvram_data_file:dir search;
+allow factory audiohal_prop:property_service set;
+allow factory pmic_ftm_device:chr_file { read write ioctl open};
+allow factory powerctl_prop:property_service set;
+allow factory ttyGS_device:chr_file { read write open ioctl};
+allow factory ttyMT_device:chr_file { read write open ioctl};
+allow factory irtx_device:chr_file { read write ioctl open };
+allow factory devpts:chr_file { read write getattr ioctl };
+allow factory vfat:dir search;
+allow factory hrm_device:chr_file { read ioctl open };
+
+# Date: WK14.47
+# Operation : Migration
+# Purpose : CCCI
+allow factory eemcs_device:chr_file { read write ioctl open };
+
+# Purpose : SDIO
+allow factory ttySDIO_device:chr_file { read write ioctl open };
+
+# Date: WK15.01
+# Purpose : OTG Mount
+allow factory fuse:dir mounton;
+# Date: WK15.07
+# Purpose : use c2k flight mode;
+allow factory vmodem_device:chr_file { read write ioctl open };