1 2# Policy File of /system/bin/connsyslogger Executable File 3 4# ============================================== 5# Type Declaration 6# ============================================== 7# Purpose : for create hidl server 8#hal_server_domain(connsyslogger, mtk_hal_log) 9# ============================================== 10# MTK Policy Rule 11# ============================================== 12 13#for logging sdcard access 14allow connsyslogger fuse:dir { create_dir_perms }; 15allow connsyslogger fuse:file { create_file_perms }; 16 17#consys logger access on /data/consyslog 18allow connsyslogger consyslog_data_file:dir { create_dir_perms relabelto }; 19allow connsyslogger consyslog_data_file:fifo_file { create_file_perms }; 20allow connsyslogger consyslog_data_file:file { create_file_perms }; 21 22allow connsyslogger tmpfs:lnk_file { create_file_perms }; 23 24# purpose: avc: denied { read } for name="plat_file_contexts" 25allow connsyslogger file_contexts_file:file { read getattr open map}; 26 27#logger SD logging in factory mode 28allow connsyslogger vfat:dir create_dir_perms; 29allow connsyslogger vfat:file create_file_perms; 30 31#logger permission in storage in android M version 32allow connsyslogger mnt_user_file:dir search; 33allow connsyslogger mnt_user_file:lnk_file read; 34allow connsyslogger storage_file:lnk_file read; 35 36#permission for use SELinux API 37allow connsyslogger rootfs:file r_file_perms; 38 39#permission for storage access storage 40allow connsyslogger storage_file:dir { create_dir_perms }; 41allow connsyslogger storage_file:file { create_file_perms }; 42 43#permission for read boot mode 44allow connsyslogger sysfs_boot_mode:file { read open }; 45 46allow connsyslogger fw_log_wifi_device:chr_file {read write open ioctl}; 47allow connsyslogger fw_log_bt_device:chr_file {read write open ioctl}; 48allow connsyslogger fw_log_gps_device:chr_file {read write open ioctl}; 49allow connsyslogger fw_log_wmt_device:chr_file {read write open ioctl}; 50 51allow connsyslogger sdcardfs:dir { create_dir_perms }; 52allow connsyslogger sdcardfs:file { create_file_perms }; 53allow connsyslogger rootfs:lnk_file getattr; 54 55allow connsyslogger media_rw_data_file:file { create_file_perms }; 56allow connsyslogger media_rw_data_file:dir { create_dir_perms }; 57 58allow connsyslogger vendor_configs_file:file map; 59#permission to get driver ready status 60get_prop(connsyslogger, vendor_mtk_wmt_prop) 61 62#Date:2019/03/25 63# purpose: allow connsyslogger to access persist.meta.connecttype 64get_prop(connsyslogger, vendor_mtk_meta_connecttype_prop) 65 66 67#Date:2019/03/25 68# purpose: allow emdlogger to create socket 69allow connsyslogger port:tcp_socket { name_connect name_bind }; 70allow connsyslogger connsyslogger:tcp_socket { create_stream_socket_perms }; 71allow connsyslogger node:tcp_socket node_bind; 72 73#Date:2019/03/25 74# usb device ttyGSx for modem logger usb logging 75allow connsyslogger ttyGS_device:chr_file { rw_file_perms}; 76 77# Add permission to access new bootmode file 78allow connsyslogger sysfs_boot_info:file r_file_perms; 79