summaryrefslogtreecommitdiffstats
path: root/r_non_plat/nvram_agent_binder.te
diff options
context:
space:
mode:
Diffstat (limited to 'r_non_plat/nvram_agent_binder.te')
-rw-r--r--r_non_plat/nvram_agent_binder.te66
1 files changed, 0 insertions, 66 deletions
diff --git a/r_non_plat/nvram_agent_binder.te b/r_non_plat/nvram_agent_binder.te
deleted file mode 100644
index 6655e6e..0000000
--- a/r_non_plat/nvram_agent_binder.te
+++ /dev/null
@@ -1,66 +0,0 @@
-# ==============================================
-# Policy File of /vendor/bin/nvram_agent_binder Executable File
-
-# ==============================================
-# Type Declaration
-# ==============================================
-type nvram_agent_binder_exec , exec_type, file_type, vendor_file_type;
-type nvram_agent_binder ,domain;
-
-# ==============================================
-# MTK Policy Rule
-# ==============================================
-init_daemon_domain(nvram_agent_binder)
-
-# Date : WK14.35
-# Operation : access nvram by binder
-# Purpose : ensure nvram user can access nvram file normally.
-#allow nvram_agent_binder nvram_agent_service:service_manager add;
-
-# Date : WK14.43
-# Operation : 2rd Selinux Migration
-# Purpose : the role of nvram_agent_binder is same with nvram_daemon except property_set & exect permission
-allow nvram_agent_binder nvram_device:blk_file rw_file_perms;
-allow nvram_agent_binder nvdata_device:blk_file rw_file_perms;
-allow nvram_agent_binder nvram_data_file:dir create_dir_perms;
-allow nvram_agent_binder nvram_data_file:file create_file_perms;
-allow nvram_agent_binder nvram_data_file:lnk_file read;
-allow nvram_agent_binder nvdata_file:lnk_file read;
-allow nvram_agent_binder nvdata_file:dir create_dir_perms;
-allow nvram_agent_binder nvdata_file:file create_file_perms;
-
-allow nvram_agent_binder als_ps_device:chr_file r_file_perms;
-allow nvram_agent_binder mtk-adc-cali_device:chr_file rw_file_perms;
-allow nvram_agent_binder gsensor_device:chr_file r_file_perms;
-allow nvram_agent_binder gyroscope_device:chr_file r_file_perms;
-allow nvram_agent_binder self:capability { fowner chown fsetid };
-
-# Purpose: for backup
-allow nvram_agent_binder nvram_device:chr_file rw_file_perms;
-allow nvram_agent_binder pro_info_device:chr_file rw_file_perms;
-allow nvram_agent_binder block_device:dir search;
-
-# for MLC device
-allow nvram_agent_binder mtd_device:dir search;
-allow nvram_agent_binder mtd_device:chr_file rw_file_perms;
-
-#for nvram agent hidl
-get_prop(nvram_agent_binder, hwservicemanager_prop)
-
-# Allow to use HWBinder IPC
-hwbinder_use(nvram_agent_binder);
-
-# Allow a set of permissions required for a domain to be a server which provides a HAL implementation over HWBinder.
-hal_server_domain(nvram_agent_binder, hal_nvramagent)
-
-# Date : WK18.16
-# Operation: P migration
-# Purpose: Allow nvram_daemon to get tel_switch_prop
-get_prop(nvram_daemon, tel_switch_prop)
-
-# Date : WK18.21
-# Operation: P migration
-# Purpose: Allow to search /mnt/vendor/nvdata when using nvram function
-allow nvram_agent_binder mnt_vendor_file:dir search;
-
-allow nvram_agent_binder sysfs_boot_mode:file r_file_perms;