64 lines
2.5 KiB
Plaintext
64 lines
2.5 KiB
Plaintext
# ==============================================
|
|
# Policy File of /system/bindualmdlogger Executable File
|
|
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
|
|
type dualmdlogger_exec , exec_type, file_type;
|
|
type dualmdlogger ,domain;
|
|
|
|
# ==============================================
|
|
# Android Policy Rule
|
|
# ==============================================
|
|
|
|
# ==============================================
|
|
# NSA Policy Rule
|
|
# ==============================================
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
|
|
#permissive dualmdlogger;
|
|
init_daemon_domain(dualmdlogger)
|
|
|
|
|
|
#=============allow mdlogger to set ==============
|
|
allow dualmdlogger debug_mdlogger_prop:property_service set;
|
|
allow dualmdlogger debug_prop:property_service set;
|
|
allow dualmdlogger ccci_device:chr_file { read write ioctl open };
|
|
allow dualmdlogger ttyGS_device:chr_file { read write open ioctl};
|
|
allow dualmdlogger fuse:dir { write search create rmdir add_name remove_name read open rename};
|
|
allow dualmdlogger fuse:file { write read create open rename unlink getattr setattr append};
|
|
allow dualmdlogger mdlog_data_file:dir { write search read create open rmdir remove_name add_name relabelto getattr};
|
|
allow dualmdlogger mdlog_data_file:fifo_file { read open create setattr};
|
|
allow dualmdlogger mdlog_data_file:file { write read create open rename unlink getattr setattr};
|
|
allow dualmdlogger mdlog_device:chr_file { read write open ioctl};
|
|
allow dualmdlogger system_data_file:dir { write create open add_name relabelfrom};
|
|
|
|
allow dualmdlogger init:unix_stream_socket connectto;
|
|
allow dualmdlogger property_socket:sock_file write;
|
|
allow dualmdlogger platform_app:unix_stream_socket connectto;
|
|
|
|
allow dualmdlogger shell_exec:file { read execute open execute_no_trans };
|
|
allow dualmdlogger system_file:file execute_no_trans;
|
|
allow dualmdlogger zygote_exec:file { read getattr open execute execute_no_trans };
|
|
allow dualmdlogger tmpfs:lnk_file read;
|
|
|
|
#============= dualmdlogger usb logging ==============
|
|
# Date : 2014/09/26
|
|
# Operation : Migration
|
|
# Purpose : [DUALMDLOGGER] [dualmdlogger usb logging tcp_socket]
|
|
# Package: system/bin/dualmdlogger
|
|
|
|
allow dualmdlogger fuse:dir search;
|
|
allow dualmdlogger node:tcp_socket node_bind;
|
|
allow dualmdlogger port:tcp_socket name_bind;
|
|
allow dualmdlogger self:tcp_socket { write read bind create setopt accept listen };
|
|
|
|
|
|
binder_use(dualmdlogger)
|
|
binder_service(dualmdlogger)
|