1# ============================================== 2# MTK Policy Rule 3# ============================================== 4 5# New added for move to /system 6type cmddumper_exec, exec_type, file_type; 7typeattribute cmddumper coredomain; 8 9init_daemon_domain(cmddumper) 10 11# cmddumper access on /data/mdlog 12allow cmddumper system_data_file:dir { create_dir_perms relabelfrom relabelto}; 13 14# "mdl_serv_fifo" scontext=u:r:cmddumper:s0 tcontext=u:object_r:system_data_file 15allow cmddumper system_data_file:fifo_file create_file_perms; 16 17 18# for modem logging sdcard access 19allow cmddumper sdcard_type:dir create_dir_perms; 20allow cmddumper sdcard_type:file create_file_perms; 21 22# modem logger socket access 23allow cmddumper init:unix_stream_socket connectto; 24allow cmddumper property_socket:sock_file { write read }; 25allow cmddumper platform_app:unix_stream_socket connectto; 26allow cmddumper shell_exec:file { rx_file_perms }; 27allow cmddumper system_file:file x_file_perms; 28 29 30# purpose: allow cmddumper to access storage in N version 31allow cmddumper media_rw_data_file:file { create_file_perms }; 32allow cmddumper media_rw_data_file:dir { create_dir_perms }; 33 34# purpose: access plat_file_contexts 35allow cmddumper file_contexts_file:file { read getattr open }; 36 37