1# ============================================== 2# MTK Policy Rule 3# ============================================== 4 5type custom_file, file_type, data_file_type; 6type lost_found_data_file, file_type, data_file_type; 7type dontpanic_data_file, file_type, data_file_type; 8type resource_cache_data_file, file_type, data_file_type; 9type http_proxy_cfg_data_file, file_type, data_file_type; 10type acdapi_data_file, file_type, data_file_type; 11type ppp_data_file, file_type, data_file_type; 12type wpa_supplicant_data_file, file_type, data_file_type; 13type radvd_data_file, file_type, data_file_type; 14type volte_vt_socket, file_type; 15type dfo_socket, file_type; 16type gsmrild_socket, file_type; 17type rild2_socket, file_type; 18type rild3_socket, file_type; 19type rild4_socket, file_type; 20type rild_mal_socket, file_type; 21type rild_mal_at_socket, file_type; 22type rild_mal_md2_socket, file_type; 23type rild_mal_at_md2_socket, file_type; 24type rild_ims_socket, file_type; 25type rild_imsm_socket, file_type; 26type rild_oem_socket, file_type; 27type rild_mtk_ut_socket, file_type; 28type rild_mtk_ut_2_socket, file_type; 29type rild_mtk_modem_socket, file_type; 30type rild_md2_socket, file_type; 31type rild2_md2_socket, file_type; 32type rild_debug_md2_socket, file_type; 33type rild_oem_md2_socket, file_type; 34type rild_mtk_ut_md2_socket, file_type; 35type rild_mtk_ut_2_md2_socket, file_type; 36type rild_mtk_modem_md2_socket, file_type; 37type rild_vsim_socket, file_type; 38type rild_vsim_md2_socket, file_type; 39type mal_mfi_socket, file_type; 40type mal_data_file, file_type, data_file_type; 41type netdiag_socket, file_type; 42type wpa_wlan0_socket, file_type; 43type soc_vt_imcb_socket, file_type; 44type soc_vt_tcv_socket, file_type; 45type soc_vt_stk_socket, file_type; 46type soc_vt_svc_socket, file_type; 47type dbus_bluetooth_socket, file_type; 48type bt_int_adp_socket, file_type; 49type bt_a2dp_stream_socket, file_type; 50type bt_data_file, file_type, data_file_type; 51type proc_thermal, fs_type, proc_type; 52type proc_mtkcooler, fs_type, proc_type; 53type proc_mtktz, fs_type, proc_type; 54type proc_mtd, fs_type, proc_type; 55type proc_slogger, fs_type, proc_type; 56type proc_lk_env, fs_type, proc_type; 57type proc_ged, fs_type, proc_type; 58type proc_mtk_jpeg, fs_type, proc_type; 59type proc_perfmgr, fs_type, proc_type; 60type proc_wmtdbg, fs_type, proc_type; 61type proc_zraminfo, fs_type, proc_type; 62type proc_cpu_alignment, fs_type, proc_type; 63type proc_gpulog, fs_type, proc_type; 64type proc_sched_debug, fs_type, proc_type; 65type proc_chip, fs_type, proc_type; 66type proc_atf_log, fs_type, proc_type; 67type proc_gz_log, fs_type, proc_type; 68type proc_last_kmsg, fs_type, proc_type; 69type proc_bootprof, fs_type, proc_type; 70type proc_mtprintk, fs_type, proc_type; 71type proc_pl_lk, fs_type, proc_type; 72type proc_msdc_debug, fs_type, proc_type; 73type proc_ufs_debug, fs_type, proc_type; 74type proc_pidmap, fs_type, proc_type; 75type proc_slabtrace, fs_type, proc_type; 76type proc_cmdq_debug, fs_type, proc_type; 77type proc_isp_p2, fs_type, proc_type; 78type proc_dbg_repo, fs_type, proc_type; 79type proc_isp_p2_dump, fs_type, proc_type; 80type proc_isp_p2_kedump, fs_type, proc_type; 81type proc_memory_usage, fs_type, proc_type; 82type proc_mtk_es_reg_dump, fs_type, proc_type; 83type proc_ccci_dump, fs_type, proc_type; 84type proc_log_much, fs_type, proc_type; 85type sysfs_execstate, fs_type, sysfs_type; 86type sysfs_therm, fs_type, sysfs_type; 87type sysfs_fps, fs_type, sysfs_type; 88type sysfs_ccci, fs_type, sysfs_type; 89type sysfs_mdinfo, fs_type,sysfs_type; 90type sysfs_ssw, fs_type,sysfs_type; 91type sysfs_vcorefs_pwrctrl, fs_type, sysfs_type; 92type sysfs_md32, fs_type, sysfs_type; 93type sysfs_scp, fs_type, sysfs_type; 94type sysfs_adsp, fs_type, sysfs_type; 95type sysfs_rt_param, fs_type, sysfs_type; 96type sysfs_rt_calib, fs_type, sysfs_type; 97type sysfs_sspm, fs_type, sysfs_type; 98type sysfs_devinfo, fs_type, sysfs_type, mlstrustedobject; 99type sysfs_dcm, fs_type, sysfs_type; 100type sysfs_dcs, fs_type, sysfs_type; 101type sysfs_vcore_debug, fs_type, sysfs_type; 102type agpsd_socket, file_type; 103type agpsd_data_file, file_type, data_file_type; 104type mnld_socket, file_type; 105type mnld_data_file, file_type, data_file_type; 106type gps_data_file, file_type, data_file_type; 107type MPED_socket, file_type; 108type MPED_data_file, file_type, data_file_type; 109type sysctl_socket, file_type; 110type backuprestore_socket, file_type; 111type protect_f_data_file, file_type, data_file_type; 112type protect_s_data_file, file_type, data_file_type; 113type persist_data_file, file_type, data_file_type; 114type nvram_data_file, file_type, data_file_type; 115type nvdata_file, file_type, data_file_type; 116type nvcfg_file, file_type, data_file_type; 117type cct_data_file, file_type, data_file_type; 118type mediaserver_data_file, file_type, data_file_type; 119type mediacodec_data_file, file_type, data_file_type; 120type connsyslog_data_vendor_file, file_type, data_file_type; 121 122# AAO 123type data_vendor_aao_file, file_type, data_file_type; 124type data_vendor_aaoHwBuf_file, file_type, data_file_type; 125type data_vendor_AAObitTrue_file, file_type, data_file_type; 126 127# Flash 128type data_vendor_flash_file, file_type, data_file_type; 129 130# Flicker 131type data_vendor_flicker_file, file_type, data_file_type; 132 133# AFO 134type data_vendor_afo_file, file_type, data_file_type; 135 136# PDO 137type data_vendor_pdo_file, file_type, data_file_type; 138 139#mobilelog data/misc/mblog 140type logmisc_data_file, file_type, data_file_type, core_data_file_type; 141 142#mobilelog data/log_temp 143type logtemp_data_file, file_type, data_file_type, core_data_file_type; 144 145# NE core_forwarder 146type aee_core_data_file, file_type, data_file_type, core_data_file_type; 147type aee_core_vendor_file, file_type, data_file_type; 148 149# AEE exp 150type aee_exp_data_file, file_type, data_file_type, core_data_file_type, mlstrustedobject; 151type aee_exp_vendor_file, file_type, data_file_type; 152type aee_dumpsys_data_file, file_type, data_file_type, core_data_file_type; 153type aee_dumpsys_vendor_file, file_type, data_file_type; 154 155# SF rtt dump 156type sf_rtt_file, file_type, data_file_type, core_data_file_type; 157 158#for 3Gdongle 159type rild-dongle_socket, file_type; 160 161type ccci_cfg_file, file_type, data_file_type; 162type ccci_data_md1_file, file_type, data_file_type; 163type c2k_file, file_type, data_file_type; 164#For sensor 165type sensor_data_file, file_type, data_file_type; 166type stp_dump_data_file, file_type, data_file_type; 167type wifi_dump_data_file, file_type, data_file_type; 168type bt_dump_data_file, file_type, data_file_type; 169type sysfs_keypad_file, fs_type, sysfs_type; 170type rild_via_socket, file_type; 171type rpc_socket, file_type; 172type rild_ctclient_socket, file_type; 173#For icusb 174type proc_icusb, fs_type, proc_type; 175 176# for labeling /mnt/cd-rom as iso9660 177type iso9660, fs_type; 178 179# data_tmpfs_log 180type data_tmpfs_log_file, file_type, data_file_type, core_data_file_type; 181type vendor_tmpfs_log_file, file_type, data_file_type; 182 183# rawfs for /protect_f on NAND projects 184type rawfs, fs_type, mlstrustedobject; 185 186# fat on nand fat.img 187type fon_image_data_file, file_type, data_file_type; 188 189# ims ipsec config file 190type ims_ipsec_data_file, file_type, data_file_type; 191 192# thermal manager config file 193type thermal_manager_data_file, file_type, data_file_type; 194 195# adbd config file 196type adbd_data_file, file_type, data_file_type, core_data_file_type; 197 198#autokd data file 199type autokd_data_file, file_type, data_file_type; 200 201#fuse 202type fuseblk,sdcard_type,fs_type,mlstrustedobject; 203 204# for mt-ramdump reset 205type proc_mrdump_rst, fs_type, proc_type; 206 207# binder debugfs file 208type debugfs_binder, fs_type, debugfs_type; 209 210# blockio debugfs file 211type debugfs_blockio, fs_type, debugfs_type; 212 213# fuseio debugfs file 214type debugfs_fuseio, fs_type, debugfs_type; 215 216# usb debugfs file 217type debugfs_usb_nonplat, fs_type, debugfs_type; 218 219# display debugfs file 220type debugfs_fb, fs_type, debugfs_type; 221 222# cpuhvfs debugfs file 223type debugfs_cpuhvfs, fs_type, debugfs_type; 224 225# dynamic_debug debugfs file 226type debugfs_dynamic_debug, fs_type, debugfs_type; 227 228# shrinker debugfs file 229type debugfs_shrinker_debug, fs_type, debugfs_type; 230 231# dmlog debugfs file 232type debugfs_dmlog_debug, fs_type, debugfs_type; 233 234# page_owner_slim debugfs file 235type debugfs_page_owner_slim_debug, fs_type, debugfs_type; 236 237# rcu debugfs file 238type debugfs_rcu, fs_type, debugfs_type; 239 240# gpu debugfs file 241type debugfs_ged, fs_type, debugfs_type; 242 243# fpsgo debugfs file 244type debugfs_fpsgo, fs_type, debugfs_type; 245 246# eara_thermal debugfs file 247type debugfs_eara_thermal, fs_type, debugfs_type; 248 249# vpu debugfs file 250type debugfs_vpu_power, fs_type, debugfs_type; 251type debugfs_vpu_memory, fs_type, debugfs_type; 252 253# mdla debugfs file 254type debugfs_mdla_power, fs_type, debugfs_type; 255 256# apusys_midware debugfs file 257type debugfs_apusys_midware_queue_vpu, fs_type, debugfs_type; 258type debugfs_apusys_midware_queue_mdla, fs_type, debugfs_type; 259type debugfs_apusys_midware_register_all, fs_type, debugfs_type; 260type debugfs_apusys_mnoc_sta_dump, fs_type, debugfs_type; 261type debugfs_apusys_mdla_memory, fs_type, debugfs_type; 262type debugfs_apusys_power, fs_type, debugfs_type; 263type debugfs_apusys_debug_log, fs_type, debugfs_type; 264type debugfs_apusys_midware_mem, fs_type, debugfs_type; 265 266# memtrack debugfs file 267type debugfs_gpu_mali_midgard, fs_type, debugfs_type; 268type debugfs_gpu_mali_utgard, fs_type, debugfs_type; 269type debugfs_gpu_img, fs_type, debugfs_type; 270type debugfs_ion, fs_type, debugfs_type; 271 272# memtrack procfs file 273type procfs_gpu_img, fs_type, proc_type; 274 275# /sys/kernel/debug/ion/ion_mm_heap 276type debugfs_ion_mm_heap, fs_type, debugfs_type; 277 278# /sys/kernel/debug/emi_mbw/dump_buf 279type debugfs_emi_mbw_buf, fs_type, debugfs_type; 280 281# /sys/kernel/debug/vpu/device_dbg 282type debugfs_vpu_device_dbg, fs_type, debugfs_type; 283 284# /sys/kernel/debug/kmemleak 285type debugfs_kmemleak, fs_type, debugfs_type; 286 287###################################### 288# core domain file data 289 290# SF bqdump 291type sf_bqdump_data_file, file_type, data_file_type, core_data_file_type; 292type nfc_socket, file_type, data_file_type, core_data_file_type; 293type vendor_nfc_socket, file_type, data_file_type; 294# factory data file 295type factory_data_file, file_type, data_file_type, core_data_file_type; 296# Modem Log folder 297type mdlog_data_file, file_type, data_file_type, core_data_file_type; 298 299# MTK audio HAL folder 300type mtk_audiohal_data_file, file_type, data_file_type; 301 302# MTK Power HAL folder 303type mtk_powerhal_data_file, file_type, data_file_type; 304 305# Date : WK1743 306# Purpose : for meta_tst copy MD DB from MD image 307type mddb_data_file, file_type, data_file_type; 308 309# Date : WK1814 310# Purpose : for factory to get boot mode and type 311type sysfs_boot_mode, fs_type, sysfs_type; 312type sysfs_boot_type, fs_type, sysfs_type; 313 314# consys Log folder 315type consyslog_data_file, file_type, data_file_type, core_data_file_type; 316 317# Date : WK1817 318# Purpose : for meta to get com port type and uart port info 319type sysfs_comport_type, fs_type, sysfs_type; 320type sysfs_uart_info, fs_type, sysfs_type; 321type sysfs_usb_nonplat, fs_type, sysfs_type; 322 323# Date : WK1820 324# Purpose : for charger to access pump_express 325type sysfs_pump_express, fs_type, sysfs_type; 326type sysfs_chg2_present, fs_type, sysfs_type; 327 328# Widevine move data/mediadrm folder from system to vendor 329type mediadrm_vendor_data_file, file_type, data_file_type; 330 331# lbs debug file 332#type lbs_dbg_data_file, file_type, data_file_type, core_data_file_type; 333 334# Touch parameters file 335type sysfs_tpd_setting, fs_type, sysfs_type; 336 337# Date : 2019/09/17 338# Purpose : mtk factory fingerprint settings 339type sysfs_gf_spi_tee, fs_type, sysfs_type; 340 341# socket between atci_service and audio-daemon 342type atci-audio_socket, file_type; 343 344# socket between atcid and meta_tst 345type meta_atci_socket, file_type; 346 347# ATCI socket types 348type rild_atci_socket, file_type; 349type rilproxy_atci_socket, file_type; 350type atci_service_socket, file_type; 351type adb_atci_socket, file_type; 352 353# Backlight brightness file 354type sysfs_leds_setting, fs_type, sysfs_type; 355 356# Vibrator vibrate file 357type sysfs_vibrator_setting, fs_type, sysfs_type; 358 359# drm key manager 360type provision_file, file_type, data_file_type; 361type key_install_data_file, file_type, data_file_type; 362 363# Date : WK18.16 364# Purpose: Android Migration 365type sysfs_mmcblk, fs_type, sysfs_type; 366type sysfs_mmcblk1, fs_type, sysfs_type; 367 368type aee_dipdebug_vendor_file, file_type, data_file_type; 369 370type netd_socket, file_type, coredomain_socket; 371 372# Date : WK19.27 373# Purpose: Android Migration for SVP 374type proc_m4u, fs_type, proc_type; 375 376# Date : 2019/08/15 377type debugfs_smi_mon, fs_type, debugfs_type; 378 379# Date : WK19.34 380# Purpose: Android Migration for video codec driver 381type vcodec_file, file_type, data_file_type; 382 383# Date : 2019/08/24 384type sysfs_sensor, fs_type, sysfs_type; 385 386#MTEE trusty 387type mtee_trusty_file, fs_type, sysfs_type; 388 389# Date : 2019/08/29 390# Purpose: Allow rild access proc/aed/reboot-reason 391type proc_aed_reboot_reason, fs_type, proc_type; 392 393# Date : 2019/09/05 394# Purpose: Allow powerhal to control kernel resources 395type proc_ppm, fs_type, proc_type; 396type proc_cpufreq, fs_type, proc_type; 397type proc_hps, fs_type, proc_type; 398type proc_cm_mgr, fs_type, proc_type; 399type proc_fliperfs, fs_type, proc_type; 400type sysfs_ged, fs_type, sysfs_type; 401type sysfs_fbt_cpu, fs_type, sysfs_type; 402type sysfs_fbt_fteh, fs_type, sysfs_type; 403type sysfs_fpsgo, fs_type, sysfs_type; 404type sysfs_xgf, fs_type, sysfs_type; 405type sysfs_gbe, fs_type, sysfs_type; 406 407# Date : 2019/09/17 408# Purpose: Allow powerhal to control cache audit 409type sysfs_ca_drv, fs_type, sysfs_type; 410type sysfs_pftch_qos, fs_type, sysfs_type; 411 412# Date : 2019/09/19 413# Purpose: Allow powerhal to trigger task-turbo 414type sysfs_task_turbo, fs_type, sysfs_type; 415 416# Date : 2019/09/23 417# Purpose: Define change_rate fs_type 418type sysfs_change_rate, fs_type, sysfs_type; 419 420# Date : 2019/10/16 421# Purpose: Define sysfs_ext4_disable_barrier fs_type 422type sysfs_ext4_disable_barrier, fs_type, sysfs_type; 423 424# Date : 2019/11/14 425# Purpose: Allow powerhal to control MCDI 426type proc_cpuidle, fs_type, proc_type; 427 428# Date : WK19.38 429# Purpose: Android Migration for video codec driver 430type sysfs_device_tree_model, fs_type, sysfs_type; 431 432# Date : 2019/10/11 433# Purpose : allow system_server to access /proc/wlan/status for Q Migration 434type proc_wlan_status, fs_type, proc_type; 435 436# Date : 2019/10/11 437# Purpose : allow system_server to access /sys/kernel/mm/ksm/pages_xxx 438type sysfs_pages_shared, fs_type, sysfs_type; 439type sysfs_pages_sharing, fs_type, sysfs_type; 440type sysfs_pages_unshared, fs_type, sysfs_type; 441type sysfs_pages_volatile, fs_type, sysfs_type; 442 443# Date : 2019/10/22 444# Purpose : allow aee_aedv write /sys/module/mrdump/parameters/lbaooo 445type sysfs_mrdump, fs_type, sysfs_type; 446type sysfs_memory, fs_type, sysfs_type; 447 448# Date : 2019/10/25 449# Purpose : To avoid using the SELabel of u:object_r:proc:s0 or u:object_r:sysfs:s0 450# to access /proc/device-tree/chosen/atag,chipid or /sysfs/firmware/devicetree/base/chosen/atag,chipid 451type sysfs_chipid, fs_type, sysfs_type; 452 453 454# Date : 2019/12/10 455# Purpose: Allow bt process or tool to control bt_dbg 456type proc_btdbg, fs_type, proc_type; 457 458# Date : 2019/12/12 459# Purpose : allow media sources to access /sys/bus/platform/drivers/mem_bw_ctrl/* 460type sysfs_concurrency_scenario, fs_type, sysfs_type; 461 462type proc_wmt_aee, fs_type, proc_type; 463 464# Date : 2019/12/19 465# Purpose : Allow ccci_fsd read /vendor/etc/md 466type vendor_etc_md_file, vendor_file_type, file_type; 467 468# Date : 2019/12/23 469# Purpose : Allow ccci_fsd read /data/vendor_de/md 470type data_vendor_de_md_file, data_file_type, file_type; 471 472# Date : WK20.07 473# Operation: R migration 474# Purpose : Add permission for new device node. 475type sysfs_meta_info, fs_type, sysfs_type; 476 477type proc_aed, fs_type, proc_type; 478 479# Date : 2020/01/16 480# Purpose: Allow mtk_hal_neuralnetworks to read chip id and segment code 481type proc_devinfo, fs_type, proc_type; 482 483# Date : 2019/04/23 484# Operation: R migration 485# Purpose : Add permission for acess vendor_de. 486type factory_vendor_file, file_type, data_file_type; 487 488type debugfs_apusys_power_fail_log, fs_type, debugfs_type; 489 490type sysfs_cache_status, fs_type, sysfs_type; 491 492# Date : 2020/06/12 493# Purpose: define sysfs_mali_power_policy fs_type 494type sysfs_mali_power_policy, fs_type, sysfs_type; 495 496# Date : 2020/06/12 497# Operation: R migration 498# Purpose: Allow powerhal to control displowpower 499type proc_displowpower, fs_type, proc_type; 500 501# Date : 2020/06/29 502# Operation: R migration 503# Purpose: Add permission for access /proc/ion/* 504type proc_ion, fs_type, proc_type; 505 506# Date : 2020/07/01 507# Operation: R migration 508# Purpose: Add permission for access /proc/m4u_dbg/* 509type proc_m4u_dbg, fs_type, proc_type; 510 511# Date : 20120/07/02 512# Purpose: define sysfs_mtk_nanohub_state fs_type 513type sysfs_mtk_nanohub_state, fs_type, sysfs_type; 514 515type proc_mtkfb, fs_type, proc_type; 516 517# Date : 2020/07/08 518# Purpose: add permission for /proc/sys/vm/swappiness 519type proc_swappiness, fs_type, proc_type; 520 521type debugfs_cmdq, fs_type, debugfs_type; 522 523# Date : 20120/07/13 524# Purpose: define sysfs_dvfsrc_dbg fs_type 525type sysfs_dvfsrc_dbg, fs_type, sysfs_type; 526