sepolicy/adbd.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

# ==============================================
# MTK Policy Rule
# ============


#violate neverallow rule
#allow adbd block_device:blk_file { read ioctl open };

#violate neverallow rule
#allow adbd labeledfs:filesystem remount;

# Date : WK14.27
# Operation : KK.AOSP SQC 
# Purpose : MTK snapshot-related mechanism
allow adbd graphics_device:chr_file { read ioctl open };

# Date : WK14.27
# Operation : KK.AOSP SQC 
# Purpose : A process wants to access a specific path. For example : shell:ls -l /data/data/
allow adbd platform_app_data_file:dir { write getattr add_name };
allow adbd platform_app_data_file:file { read create open };
allow adbd radio_data_file:file { read open };

# Date : WK14.27
# Operation : KK.AOSP SQC 
# Purpose : shell:logcat -v threadtime
allow adbd self:capability2 syslog;

allow adbd block_device:dir search;
allow adbd kernel:process setsched;
allow adbd self:capability { net_raw ipc_lock dac_override };
allow adbd system_data_file:dir { write remove_name add_name };
allow adbd tmpfs:lnk_file read;

# Date : WK14.46
# Operation : Migration
# Purpose : for MTK Emulator HW GPU
allow adbd qemu_pipe_device:chr_file rw_file_perms;

# user load adb pull /data/aee_exp db
allow adbd aee_exp_data_file:dir r_dir_perms;
allow adbd aee_exp_data_file:file r_file_perms;

# call screencap by DDMS
allow adbd surfaceflinger:dir search;
allow adbd surfaceflinger:file r_file_perms;

# Date : WK14.48
# Operation : L0 SQC
# Purpose : push/pull files to specific folders
allow adbd sf_rtt_file:dir getattr;