plat_private/cmddumper.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

# ==============================================
# MTK Policy Rule
# ==============================================

# New added for move to /system
type cmddumper_exec, exec_type, file_type;
typeattribute cmddumper coredomain;

init_daemon_domain(cmddumper)

# cmddumper  access on /data/mdlog
allow cmddumper system_data_file:dir { create_dir_perms relabelfrom relabelto};

# "mdl_serv_fifo" scontext=u:r:cmddumper:s0 tcontext=u:object_r:system_data_file
allow cmddumper system_data_file:fifo_file create_file_perms;


# for modem logging sdcard access
allow cmddumper sdcard_type:dir create_dir_perms;
allow cmddumper sdcard_type:file create_file_perms;

# modem logger socket access
allow cmddumper init:unix_stream_socket connectto;
allow cmddumper property_socket:sock_file { write read };
allow cmddumper platform_app:unix_stream_socket connectto;
allow cmddumper shell_exec:file { rx_file_perms };
allow cmddumper system_file:file x_file_perms;


# purpose: allow cmddumper to access storage in N version
allow cmddumper media_rw_data_file:file  { create_file_perms };
allow cmddumper media_rw_data_file:dir { create_dir_perms };

# purpose: access plat_file_contexts
allow cmddumper file_contexts_file:file { read getattr open };