1# ============================================== 2# Policy File of /vendor/bin/kisd Executable File 3 4 5# ============================================== 6# Type Declaration 7# ============================================== 8 9type kisd ,domain; 10type kisd_exec, exec_type, file_type, vendor_file_type; 11typeattribute kisd mlstrustedsubject; 12 13# ============================================== 14# MTK Policy Rule 15# ============================================== 16 17init_daemon_domain(kisd) 18 19allow kisd tee_device:chr_file {read write open ioctl}; 20allow kisd provision_file:dir {read write open ioctl add_name search remove_name}; 21allow kisd provision_file:file {create read write open getattr unlink}; 22allow kisd block_device:dir {read write open ioctl search}; 23allow kisd kb_block_device:blk_file {read write open ioctl getattr}; 24allow kisd dkb_block_device:blk_file {read write open ioctl getattr}; 25allow kisd key_install_data_file:dir {write remove_name add_name}; 26allow kisd key_install_data_file:file {write getattr read create unlink open}; 27allow kisd key_install_data_file:dir search; 28allow kisd mtd_device:chr_file { open read write }; 29allow kisd mtd_device:blk_file { open read write ioctl getattr}; 30allow kisd mtd_device:dir { search }; 31allow kisd kb_block_device:chr_file {read write open ioctl getattr}; 32allow kisd dkb_block_device:chr_file {read write open ioctl getattr}; 33