# ============================================== # Policy File of /system/bindualmdlogger Executable File # ============================================== # Type Declaration # ============================================== type dualmdlogger_exec , exec_type, file_type; type dualmdlogger ,domain; # ============================================== # Android Policy Rule # ============================================== # ============================================== # NSA Policy Rule # ============================================== # ============================================== # MTK Policy Rule # ============================================== #permissive dualmdlogger; init_daemon_domain(dualmdlogger) #=============allow mdlogger to set ============== allow dualmdlogger debug_mdlogger_prop:property_service set; allow dualmdlogger debug_prop:property_service set; allow dualmdlogger ccci_device:chr_file { read write ioctl open }; allow dualmdlogger ttyGS_device:chr_file { read write open ioctl}; allow dualmdlogger fuse:dir { write search create rmdir add_name remove_name read open rename}; allow dualmdlogger fuse:file { write read create open rename unlink getattr setattr append}; allow dualmdlogger mdlog_data_file:dir { write search read create open rmdir remove_name add_name relabelto getattr}; allow dualmdlogger mdlog_data_file:fifo_file { read open create setattr}; allow dualmdlogger mdlog_data_file:file { write read create open rename unlink getattr setattr}; allow dualmdlogger mdlog_device:chr_file { read write open ioctl}; allow dualmdlogger system_data_file:dir { write create open add_name relabelfrom}; allow dualmdlogger init:unix_stream_socket connectto; allow dualmdlogger property_socket:sock_file write; allow dualmdlogger platform_app:unix_stream_socket connectto; allow dualmdlogger shell_exec:file { read execute open execute_no_trans }; allow dualmdlogger system_file:file execute_no_trans; allow dualmdlogger zygote_exec:file { read getattr open execute execute_no_trans }; allow dualmdlogger tmpfs:lnk_file read; #============= dualmdlogger usb logging ============== # Date : 2014/09/26 # Operation : Migration # Purpose : [DUALMDLOGGER] [dualmdlogger usb logging tcp_socket] # Package: system/bin/dualmdlogger allow dualmdlogger fuse:dir search; allow dualmdlogger node:tcp_socket node_bind; allow dualmdlogger port:tcp_socket name_bind; allow dualmdlogger self:tcp_socket { write read bind create setopt accept listen }; binder_use(dualmdlogger) binder_service(dualmdlogger)