79 lines
2.8 KiB
Plaintext
79 lines
2.8 KiB
Plaintext
# ==============================================
|
|
# Policy File of /system/bin/viarild Executable File
|
|
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
|
|
type viarild_exec , exec_type, file_type;
|
|
type viarild ,domain;
|
|
|
|
|
|
# ==============================================
|
|
# MTK C2K Policy Rule
|
|
# ==============================================
|
|
|
|
init_daemon_domain(viarild)
|
|
net_domain(viarild)
|
|
allow viarild self:netlink_route_socket nlmsg_write;
|
|
allow viarild kernel:system module_request;
|
|
unix_socket_connect(viarild, property, init)
|
|
allow viarild self:capability { setuid net_admin net_raw };
|
|
allow viarild alarm_device:chr_file rw_file_perms;
|
|
allow viarild cgroup:dir create_dir_perms;
|
|
allow viarild radio_device:chr_file rw_file_perms;
|
|
allow viarild radio_device:blk_file r_file_perms;
|
|
allow viarild mtd_device:dir search;
|
|
allow viarild efs_file:dir create_dir_perms;
|
|
allow viarild efs_file:file create_file_perms;
|
|
allow viarild shell_exec:file rx_file_perms;
|
|
allow viarild bluetooth_efs_file:file r_file_perms;
|
|
allow viarild bluetooth_efs_file:dir r_dir_perms;
|
|
allow viarild radio_data_file:dir rw_dir_perms;
|
|
allow viarild radio_data_file:file create_file_perms;
|
|
allow viarild sdcard_type:dir r_dir_perms;
|
|
allow viarild system_data_file:dir r_dir_perms;
|
|
allow viarild system_data_file:file r_file_perms;
|
|
allow viarild system_file:file x_file_perms;
|
|
allow viarild proc:file write;
|
|
|
|
# property service
|
|
allow statusd system_prop:property_service set;
|
|
allow viarild radio_prop:property_service set;
|
|
allow viarild net_radio_prop:property_service set;
|
|
allow viarild system_radio_prop:property_service set;
|
|
allow viarild persist_ril_prop:property_service set;
|
|
auditallow viarild net_radio_prop:property_service set;
|
|
auditallow viarild system_radio_prop:property_service set;
|
|
|
|
# Read/Write to uart driver (for GPS)
|
|
allow viarild gps_device:chr_file rw_file_perms;
|
|
|
|
allow viarild tty_device:chr_file rw_file_perms;
|
|
|
|
# Allow viarild to create and use netlink sockets.
|
|
allow viarild self:netlink_socket create_socket_perms;
|
|
allow viarild self:netlink_kobject_uevent_socket create_socket_perms;
|
|
|
|
# Access to wake locks
|
|
wakelock_use(viarild)
|
|
|
|
allow viarild self:socket create_socket_perms;
|
|
|
|
allow viarild Vcodec_device:chr_file { read write open };
|
|
allow viarild devmap_device:chr_file { read ioctl open };
|
|
allow viarild devpts:chr_file { read write open };
|
|
allow viarild self:capability dac_override;
|
|
|
|
allow viarild ccci_device:chr_file { read write ioctl open };
|
|
allow viarild devpts:chr_file ioctl;
|
|
allow viarild misc_device:chr_file { read write open };
|
|
allow viarild platformblk_device:blk_file { read write open };
|
|
allow viarild proc_lk_env:file { read ioctl open };
|
|
allow viarild sysfs_vcorefs_pwrctrl:file { open write };
|
|
allow viarild ril_active_md_prop:property_service set;
|
|
|
|
#Search permission for findPidByName
|
|
allow statusd domain:dir search;
|