225 lines
6.8 KiB
Plaintext
225 lines
6.8 KiB
Plaintext
# ==============================================
|
|
# MTK Policy Rule
|
|
# ============
|
|
|
|
# Date : WK15.02
|
|
# Operation : 120Hz Feature SQC
|
|
# Purpose : for 120Hz Smart Switch
|
|
allow system_server mtk_rrc_device:chr_file { read write ioctl open };
|
|
# Date : WK14.31
|
|
# Operation : Migration
|
|
# Purpose : for bring up
|
|
allow system_server hwmsensor_device:chr_file { read ioctl open };
|
|
allow system_server m_batch_misc_device:chr_file { read ioctl open };
|
|
allow system_server proc:file write;
|
|
allow system_server touch_device:chr_file { read ioctl open };
|
|
|
|
# Date : WK14.32
|
|
# Operation : Migration
|
|
# Purpose : for wifi p2p functionality
|
|
allow system_server dhcp_data_file:dir { read write remove_name search getattr };
|
|
allow system_server dhcp_data_file:file { read open unlink getattr };
|
|
|
|
# Date : WK14.33
|
|
# Operation : Migration
|
|
# Purpose : for wifi functionality
|
|
allow system_server wpa_wlan0_socket:sock_file write;
|
|
allow system_server hostapd:unix_dgram_socket sendto;
|
|
allow hostapd system_server:unix_dgram_socket sendto;
|
|
|
|
# Date : WK14.34
|
|
# Operation : Migration
|
|
# Purpose : for WFD functionality
|
|
allow system_server media_wfd_prop:property_service set;
|
|
|
|
# Date : WK14.34
|
|
# Operation : Migration
|
|
# Purpose : for idling on homescreen
|
|
allow system_server dontpanic_data_file:dir search;
|
|
allow system_server mnld:unix_dgram_socket sendto;
|
|
|
|
# Date : WK14.34
|
|
# Operation : Migration
|
|
# Purpose : for debug
|
|
allow system_server debuggerd:fd use;
|
|
allow system_server mnld_data_file:sock_file create_file_perms;
|
|
allow system_server mnld_data_file:sock_file rw_file_perms;
|
|
allow system_server mnld_data_file:dir create_file_perms;
|
|
allow system_server mnld_data_file:dir rw_dir_perms;
|
|
|
|
# Date : WK14.37
|
|
# Operation : Migration
|
|
# Purpose : for idling on homescreen
|
|
allow system_server guiext-server:binder { transfer call };
|
|
allow system_server touch_device:chr_file write;
|
|
|
|
# Date : WK14.37
|
|
# Operation : Migration
|
|
# Purpose : for relabeling files in /data/anr/ created at bootup
|
|
allow system_server anr_data_file:file relabelto;
|
|
|
|
# Date : WK14.38
|
|
# Operation : Migration
|
|
# Purpose : for debug
|
|
allow system_server debuggerd:binder call;
|
|
allow system_server resmon:fd use;
|
|
allow system_server resmon:fifo_file write;
|
|
|
|
# Date : WK14.39
|
|
# Operation : Migration
|
|
# Purpose : for operate HDMI device
|
|
allow system_server graphics_device:chr_file { read ioctl open };
|
|
|
|
# Date : WK14.40
|
|
# Operation : Migration
|
|
# Purpose : for operate ANT device driver
|
|
allow system_server stpant_device:chr_file { read open write ioctl};
|
|
|
|
# Date: WK14.40
|
|
# Operation : Migration
|
|
# Purpose : for ACTION_PREBOOT_IPO intent in ipo boot
|
|
binder_call(system_server, ipod)
|
|
|
|
# Date: wk14.40
|
|
# Operation : SQC
|
|
# Purpose : [ALPS01756200] wwop boot up fail
|
|
allow system_server custom_file:dir { read search open getattr};
|
|
allow system_server custom_file:file { read open getattr};
|
|
|
|
# Date: WK14.41
|
|
# Operation : Migration
|
|
# Purpose : boost surfaceflinger to RT
|
|
allow system_server surfaceflinger:process setsched;
|
|
|
|
# Date: WK14.41
|
|
# Operation : Migration
|
|
# Purpose : [ALPS01760531] for bring up after auto-merge
|
|
allow system_server zygote:binder impersonate;
|
|
|
|
# Date: WK14.41
|
|
# Operation : Migration
|
|
# Purpose : for system_server operate /dev/RT_Monitor when enable hang detect
|
|
allow system_server RT_Monitor_device:chr_file { read ioctl open };
|
|
|
|
# Date: WK14.42
|
|
# Operation : Migration
|
|
# Purpose : for system_server to start bootanim
|
|
allow system_server ctl_bootanim_prop:property_service set;
|
|
|
|
|
|
# Date : WK14.42
|
|
# Operation : SQC
|
|
# Purpose : ALPS01763317
|
|
# After connected to DHCPv6 enabled 6to4 IPv6 AP,
|
|
#the ipv6 related values of getprop command are wrong
|
|
#============= system_server ==============
|
|
allow system_server proc_net:file write;
|
|
allow system_server wide_dhcpv6_data_file:dir search;
|
|
allow system_server wide_dhcpv6_data_file:file { read getattr open };
|
|
|
|
# Date: WK14.41
|
|
# Operation : Migration
|
|
# Purpose : allow system_server to start ipod
|
|
allow system_server ctl_ipod_prop:property_service set;
|
|
|
|
# Date: WK14.43
|
|
# Operation : Migration
|
|
# Purpose : access to atcid from system server for GPS AT Command.
|
|
allow system_server atci_service:unix_dgram_socket sendto;
|
|
allow system_server atci_service:dir write;
|
|
allow system_server atci_service:dir add_name;
|
|
|
|
# Date: WK14.43
|
|
# Operation : Migration
|
|
# Purpose : for bring up
|
|
allow system_server anr_data_file:dir relabelfrom;
|
|
allow system_server sf_rtt_file:dir relabelto;
|
|
|
|
# Date: WK14.43
|
|
# Operation : Migration
|
|
# Purpose : for dumpsys
|
|
allow system_server aee_dumpsys_data_file:file write;
|
|
allow system_server aee_exp_data_file:file write;
|
|
|
|
# Date: WK14.44
|
|
# Operation : Migration
|
|
# Purpose : for debug
|
|
allow system_server sf_rtt_file:dir r_dir_perms;
|
|
|
|
# Date: WK14.44
|
|
# Operation : Migration
|
|
# Purpose : for mtk gps epos library useage
|
|
allow system_server devmap_device:chr_file r_file_perms;
|
|
|
|
allow system_server irtx_device:chr_file { read write ioctl open };
|
|
|
|
# Date : WK14.46
|
|
# Operation : Migration
|
|
# Purpose : for MTK Emulator HW GPU
|
|
allow system_server qemu_pipe_device:chr_file rw_file_perms;
|
|
|
|
# Date: WK14.46
|
|
# Operation : Migration
|
|
# Purpose : for sensorhubservice
|
|
allow system_server shf_device:chr_file rw_file_perms;
|
|
|
|
# Date: W14.46
|
|
# Operation : Migration
|
|
# Purpose : for GpsLocationProvider.java to check ESUPL status
|
|
allow system_server agpsd_data_file:dir search;
|
|
|
|
# Date: WK14.46
|
|
# Operation : Migration
|
|
# Purpose : for saveLocale to set SystemProperties
|
|
allow system_server save_locale_prop:property_service set;
|
|
|
|
# Date: WK14.47
|
|
# Operation : Sanity
|
|
# Purpose : for /system/app/mcRegistry and /proc/secmem (TEE enable)
|
|
allow system_server mobicore_data_file:dir r_dir_perms;
|
|
allow system_server proc_secmem:file { rw_file_perms };
|
|
|
|
# Date: WK14.47
|
|
# Operation : Sanity
|
|
# Purpose : for avoid SELinux warning after dex2oat execv failed
|
|
allow system_server dex2oat_exec:file rx_file_perms;
|
|
|
|
# Date: WK14.47
|
|
# Operation : CTS
|
|
# Purpose : for executing recovery.dex
|
|
allow system_server system_data_file:file execute;
|
|
|
|
# Date: WK14.47
|
|
# Operation : MTBF
|
|
# Purpose : for debug
|
|
allow system_server sf_rtt_file:file r_file_perms;
|
|
|
|
# Date: WK14.47
|
|
# Operation : MTBF
|
|
# Purpose : for native process backtrace dump
|
|
allow system_server exec_type:file r_file_perms;
|
|
|
|
# Date: WK14.47
|
|
# Operation : SQC
|
|
# Purpose : for debug
|
|
allow system_server aee_core_data_file:dir r_dir_perms;
|
|
|
|
# Date: WK14.48
|
|
# Operation : SQC
|
|
# Purpose : for accessing exm0 tmpfs device
|
|
allow system_server exm0_device:chr_file { read write open };
|
|
|
|
# Date: WK14.48
|
|
# Operation : SQC
|
|
# Purpose : for querying zygote socket
|
|
allow system_server zygote:unix_stream_socket { getopt getattr };
|
|
|
|
# Date: WK14.52
|
|
# Operation : Feature developing
|
|
# Purpose : Communicate with native daemon (epdg_wod)
|
|
unix_socket_connect(system_server, wod_action, epdg_wod)
|
|
unix_socket_connect(system_server, wod_sim, epdg_wod)
|
|
|
|
# Date: WK15.05
|
|
# Purpose : for kill-switch should only grant to access frp partition, to be fix
|
|
allow system_server platformblk_device:dir search; |