# ============================================== # Policy File of /system/binfactory Executable File # ============================================== # Type Declaration # ============================================== type factory_exec , exec_type, file_type; type factory ,domain; # ============================================== # Android Policy Rule # ============================================== # ============================================== # NSA Policy Rule # ============================================== # ============================================== # MTK Policy Rule # ============================================== #permissive factory; init_daemon_domain(factory) #unconfined_domain(factory) #============= factory ============== allow factory FM50AF_device:chr_file { read write ioctl open }; allow factory AD5820AF_device:chr_file { read write ioctl open }; allow factory DW9714AF_device:chr_file { read write ioctl open }; allow factory DW9714A_device:chr_file { read write ioctl open }; allow factory LC898122AF_device:chr_file { read write ioctl open }; allow factory LC898212AF_device:chr_file { read write ioctl open }; allow factory BU6429AF_device:chr_file { read write ioctl open }; allow factory DW9718AF_device:chr_file { read write ioctl open }; allow factory BU64745GWZAF_device:chr_file { read write ioctl open }; # Camera bu64245 allow factory BU64245_device:chr_file { read write ioctl open }; allow factory MTK_SMI_device:chr_file { read ioctl open }; allow factory accdet_device:chr_file { read ioctl open }; allow factory als_ps_device:chr_file { read ioctl open }; allow factory ashmem_device:chr_file execute; allow factory audio_device:chr_file { read write ioctl open }; allow factory camera_isp_device:chr_file { read write ioctl open }; allow factory camera_pipemgr_device:chr_file { read ioctl open }; allow factory camera_sysram_device:chr_file { read ioctl open }; allow factory ccci_device:chr_file { read write ioctl open }; allow factory MT_pmic_cali_device:chr_file { read ioctl open }; allow factory barometer_device:chr_file { read ioctl open }; allow factory mtk_kpd_device:chr_file { read ioctl open }; allow factory ebc_device:chr_file { read write open }; allow factory fm_device:chr_file { read write ioctl open }; allow factory fuse:dir { read search open }; allow factory gps_device:chr_file { read write open }; allow factory graphics_device:chr_file { read write ioctl open }; allow factory gsensor_device:chr_file { read ioctl open }; allow factory gsm0710muxd_device:chr_file { read write ioctl open }; allow factory gyroscope_device:chr_file { read ioctl open }; allow factory init:unix_stream_socket connectto; allow factory input_device:chr_file { read ioctl open }; allow factory input_device:dir { read open }; allow factory kd_camera_flashlight_device:chr_file { read write ioctl open }; allow factory kd_camera_hw_device:chr_file { read write ioctl open }; allow factory kernel:system module_request; allow factory misc_sd_device:chr_file { read ioctl open }; allow factory mnld_device:chr_file { read write ioctl open }; allow factory mnld_exec:file { read execute open execute_no_trans }; allow factory msensor_device:chr_file { read ioctl open }; allow factory mt6605_device:chr_file { read write ioctl open getattr }; allow factory node:tcp_socket node_bind; allow factory nvram_data_file:dir { write read open add_name getattr setattr}; allow factory nvram_data_file:file { write getattr setattr read create open }; allow factory nvram_device:chr_file { read write ioctl open }; allow factory platformblk_device:blk_file { read write open ioctl}; allow factory self:capability sys_boot; allow factory platformblk_device:dir search; allow factory port:tcp_socket { name_bind name_connect }; allow factory property_socket:sock_file write; allow factory rtc_device:chr_file { read write ioctl open }; allow factory self:capability { sys_module ipc_lock sys_nice dac_override net_raw fsetid net_admin sys_time }; allow factory self:netlink_route_socket { bind create }; allow factory self:process execmem; allow factory self:tcp_socket { setopt read bind create accept write connect listen }; allow factory self:udp_socket { create ioctl }; allow factory stpbt_device:chr_file { read write open }; allow factory sysfs:file write; allow factory sysfs_wake_lock:file { read write open }; allow factory system_data_file:dir { write remove_name add_name }; allow factory system_data_file:sock_file { write create setattr }; allow factory system_file:file execute_no_trans; allow factory tmpfs:lnk_file read; allow factory ttyGS_device:chr_file { read write open }; allow factory wmtWifi_device:chr_file { write open }; allow factory nvram_data_file:dir { create_dir_perms }; allow factory nvram_data_file:file { create_file_perms }; allow factory nvram_data_file:lnk_file read; allow factory nvdata_file:dir { create_dir_perms }; allow factory nvdata_file:file { create_file_perms }; allow factory self:capability { sys_nice sys_time }; allow factory system_data_file:dir { write add_name }; allow factory rootfs:dir mounton; allow factory vfat:dir { read open search mounton }; allow factory vfat:filesystem { mount unmount }; allow factory block_device:dir search; allow factory graphics_device:dir search; allow factory input_device:dir search; allow factory self:capability sys_admin; allow factory self:capability sys_boot; allow factory labeledfs:filesystem unmount; allow factory platformblk_device:blk_file { getattr ioctl }; allow factory shell_exec:file execute; allow factory MT_pmic_adc_cali_device:chr_file { read write ioctl open}; allow factory audio_device:dir search; allow factory nvram_data_file:dir search; allow factory audiohal_prop:property_service set; allow factory pmic_ftm_device:chr_file { read write ioctl open}; allow factory powerctl_prop:property_service set; allow factory ttyGS_device:chr_file { read write open ioctl}; allow factory ttyMT_device:chr_file { read write open ioctl}; allow factory irtx_device:chr_file { read write ioctl open }; allow factory devpts:chr_file { read write getattr ioctl }; allow factory vfat:dir search; allow factory hrm_device:chr_file { read ioctl open }; # Date: WK14.47 # Operation : Migration # Purpose : CCCI allow factory eemcs_device:chr_file { read write ioctl open }; # Purpose : SDIO allow factory ttySDIO_device:chr_file { read write ioctl open }; # Date: WK15.01 # Purpose : OTG Mount allow factory fuse:dir mounton; # Date: WK15.07 # Purpose : use c2k flight mode; allow factory vmodem_device:chr_file { read write ioctl open };