sepolicy/sdcardd.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

# ==============================================
# MTK Policy Rule
# ============

# Date : WK14.37
# Operation : Migration 
# Purpose : for sdcard daemon to access lk_env
allow sdcardd proc_lk_env:file { read write ioctl open };
allow sdcardd misc_device:chr_file { read write open };
allow sdcardd mmcblk_device:blk_file rw_file_perms;
allow sdcardd platformblk_device:blk_file rw_file_perms;
allow sdcardd block_device:dir search;
allow sdcardd platformblk_device:dir search;

# Date : WK14.47
# Purpose : create symbolic link from /mnt/shell/emulated to /storage/emulated
allow sdcardd tmpfs:dir {write add_name mounton};
allow sdcardd tmpfs:lnk_file create;
allow sdcardd tmpfs:filesystem unmount;

# Date : WK14.48
# Purpose : invoke vdc for handle_users
allow sdcardd devpts:chr_file { read write getattr open ioctl };
allow sdcardd vdc_exec:file { read execute open execute_no_trans };
allow sdcardd vold:unix_stream_socket connectto;
allow sdcardd vold_socket:sock_file write;


# Date : WK14.48
# Purpose : unknown
allow sdcardd platform_app:fd use;
allow sdcardd untrusted_app:fd use;

# Date : WK15.02
# Purpose : ashared memory
allow sdcardd platform_app_tmpfs:file write;