1# ============================================================================== 2# Type Declaration 3# ============================================================================== 4type mtk_hal_power, domain; 5type mtk_hal_power_exec, exec_type, file_type, vendor_file_type; 6 7# hwbinder access 8init_daemon_domain(mtk_hal_power) 9 10hal_server_domain(mtk_hal_power, hal_power); 11hal_server_domain(mtk_hal_power, hal_wifi); 12 13# sysfs 14allow mtk_hal_power sysfs_devices_system_cpu:file rw_file_perms; 15 16# debugfs 17allow mtk_hal_power debugfs_ged:dir r_dir_perms; 18allow mtk_hal_power debugfs_ged:file rw_file_perms; 19 20# proc_thermal 21allow mtk_hal_power proc_thermal:file w_file_perms; 22 23# proc info 24allow mtk_hal_power mtk_hal_audio:dir r_dir_perms; 25 26# Date : 2017/10/02 27# Operation: SQC 28# Purpose : Allow powerHAL to access perfmgr 29allow mtk_hal_power proc_perfmgr:dir r_dir_perms; 30allow mtk_hal_power proc_perfmgr:file rw_file_perms; 31allowxperm mtk_hal_power proc_perfmgr:file ioctl PERFMGR_FPSGO_TOUCH; 32 33# Date : 2017/10/11 34# Operation: SQC 35# Purpose : Allow powerHAL to access powerhal folder 36allow mtk_hal_power sdcard_type:dir create_dir_perms; 37allow mtk_hal_power sdcard_type:file create_file_perms; 38allow mtk_hal_power eemcs_device:chr_file rw_file_perms; 39allow mtk_hal_power mnt_user_file:dir create_dir_perms; 40 41allow mtk_hal_power mtk_powerhal_data_file:dir {create_dir_perms rw_dir_perms}; 42allow mtk_hal_power mtk_powerhal_data_file:file {create_file_perms rw_file_perms}; 43allow mtk_hal_power mtk_powerhal_data_file:sock_file {create_file_perms rw_file_perms}; 44 45#camera contorl cpu 46allow mtk_hal_power mtk_hal_camera:dir r_dir_perms; 47allow mtk_hal_power mtk_hal_camera:file r_file_perms; 48 49# Date : 2017/10/24 50# Operation: SQC 51# Purpose : Allow powerHAL to access thermal 52allow mtk_hal_power proc_thermal:dir r_dir_perms; 53allow mtk_hal_power debugfs_fpsgo:dir r_dir_perms; 54allow mtk_hal_power debugfs_fpsgo:file rw_file_perms; 55 56# Date : 2017/12/19 57# Operation: SQC 58# Purpose : Allow powerHAL to access wlan 59allow mtk_hal_power proc_net:file w_file_perms; 60 61# Date : 2017/12/21 62# Operation: SQC 63# Purpose : Allow powerHAL to access mediacodec 64allow mtk_hal_power mediacodec:dir r_dir_perms; 65allow mtk_hal_power mediacodec:file r_file_perms; 66 67set_prop(mtk_hal_power, vendor_mtk_thermal_config_prop) 68 69# Date : 2018/03/16 70# Operation: SQC 71# Purpose : Allow powerHAL to access /d/mtkfb 72allow mtk_hal_power debugfs_fb:dir r_dir_perms; 73allow mtk_hal_power debugfs_fb:file rw_file_perms; 74 75# Date : 2018/06/26 76# Operation: Thermal change policy in perfservice 77 78allow mtk_hal_power proc_thermal:file r_file_perms; 79allow mtk_hal_power thermal_manager_data_file:file create_file_perms; 80allow mtk_hal_power thermal_manager_data_file:dir { rw_dir_perms setattr }; 81 82 83allow mtk_hal_power thermalloadalgod:unix_stream_socket connectto; 84 85allow mtk_hal_power proc_mtkcooler:dir r_dir_perms; 86allow mtk_hal_power proc_mtkcooler:file rw_file_perms; 87allow mtk_hal_power proc_mtktz:dir r_dir_perms; 88allow mtk_hal_power proc_mtktz:file rw_file_perms; 89 90# Date : 2019/05/08 91# Operation: SQC 92# Purpose : Allow powerHAL to access /proc/[pid] 93allow mtk_hal_power system_server:dir r_dir_perms; 94allow mtk_hal_power system_server:file r_file_perms; 95 96# Date : 2019/07/11 97# Operation: mt6779 SQC 98# Purpose : Allow powerHAL to VPU, RILD 99allow mtk_hal_power debugfs_vpu_power:dir r_dir_perms; 100allow mtk_hal_power debugfs_vpu_power:file rw_file_perms; 101 102allow mtk_hal_power debugfs_mdla_power:dir r_dir_perms; 103allow mtk_hal_power debugfs_mdla_power:file rw_file_perms; 104 105allow mtk_hal_power rild_oem_socket:sock_file write; 106allow mtk_hal_power rild:unix_stream_socket connectto; 107 108# Date : 2019/05/22 109# Operation: SQC 110# Purpose : Allow powerHAL to access block read ahead 111allow mtk_hal_power sysfs_dm:dir r_dir_perms; 112allow mtk_hal_power sysfs_dm:file rw_file_perms; 113allow mtk_hal_power sysfs_devices_block:dir r_dir_perms; 114allow mtk_hal_power sysfs_devices_block:file rw_file_perms; 115 116allow mtk_hal_power debugfs_eara_thermal:dir search; 117allow mtk_hal_power debugfs_eara_thermal:file { getattr open write read }; 118 119# Date : 2019/05/22 120# Operation: SQC 121# Purpose : Allow powerHAL to access prop 122set_prop(mtk_hal_power, vendor_mtk_powerhal_prop) 123 124# Date : 2019/05/29 125# Operation: SQC 126# Purpose : Allow powerHAL to access wifi driver 127allow mtk_hal_power self:udp_socket create; 128allow mtk_hal_power kernel:system module_request; 129allow mtk_hal_power self:capability sys_module; 130allowxperm mtk_hal_power self:udp_socket ioctl priv_sock_ioctls; 131 132# Date : W19.20 133# Operation : MTK power hal migration 134# Purpose : MTK power hal interface permission 135set_prop(mtk_hal_power, vendor_mtk_powerhal_prop) 136 137# Date : 2019/09/05 138# Operation: SQC 139# Purpose : Add procfs, sysfs policy 140allow mtk_hal_power proc_ppm:dir r_dir_perms; 141allow mtk_hal_power proc_ppm:file rw_file_perms; 142allow mtk_hal_power proc_cpufreq:dir r_dir_perms; 143allow mtk_hal_power proc_cpufreq:file rw_file_perms; 144allow mtk_hal_power proc_hps:dir r_dir_perms; 145allow mtk_hal_power proc_hps:file rw_file_perms; 146allow mtk_hal_power proc_cm_mgr:dir r_dir_perms; 147allow mtk_hal_power proc_cm_mgr:file rw_file_perms; 148allow mtk_hal_power proc_fliperfs:dir r_dir_perms; 149allow mtk_hal_power proc_fliperfs:file rw_file_perms; 150allow mtk_hal_power sysfs_ged:dir r_dir_perms; 151allow mtk_hal_power sysfs_ged:file rw_file_perms; 152allow mtk_hal_power sysfs_fbt_cpu:dir r_dir_perms; 153allow mtk_hal_power sysfs_fbt_cpu:file rw_file_perms; 154allow mtk_hal_power sysfs_fbt_fteh:dir r_dir_perms; 155allow mtk_hal_power sysfs_fbt_fteh:file rw_file_perms; 156allow mtk_hal_power sysfs_xgf:dir r_dir_perms; 157allow mtk_hal_power sysfs_xgf:file rw_file_perms; 158allow mtk_hal_power sysfs_fpsgo:dir r_dir_perms; 159allow mtk_hal_power sysfs_fpsgo:file rw_file_perms; 160allow mtk_hal_power sysfs_gbe:dir r_dir_perms; 161allow mtk_hal_power sysfs_gbe:file rw_file_perms; 162allow mtk_hal_power gbe_native:dir r_dir_perms; 163allow mtk_hal_power gbe_native:file r_file_perms; 164 165# Date : 2019/09/17 166# Operation: SQC 167# Purpose : Add cache audit 168allow mtk_hal_power sysfs_ca_drv:dir r_dir_perms; 169allow mtk_hal_power sysfs_ca_drv:file rw_file_perms; 170allow mtk_hal_power sysfs_pftch_qos:dir r_dir_perms; 171allow mtk_hal_power sysfs_pftch_qos:file rw_file_perms; 172 173# Date : 2019/09/18 174# Operation: SQC 175# Purpose : Add f2fs permission 176allow mtk_hal_power sysfs_fs_f2fs:dir r_dir_perms; 177allow mtk_hal_power sysfs_fs_f2fs:file rw_file_perms; 178 179# Date : 2019/09/19 180# Operation: SQC 181# Purpose : Add task turbo 182allow mtk_hal_power sysfs_task_turbo:dir r_dir_perms; 183allow mtk_hal_power sysfs_task_turbo:file rw_file_perms; 184 185# Date : 2019/09/23 186# Operation: SQC 187# Purpose : Allow powerHAL to access touch boost 188allow mtk_hal_power sysfs_change_rate:file rw_file_perms; 189 190 191# Date : 2019/10/16 192# Operation: SQC 193allow mtk_hal_power sysfs_ext4_disable_barrier:file write; 194allow mtk_hal_power block_device:dir search; 195 196# Date : 2019/11/14 197# Operation: SQC 198# Purpose : Allow powerhal to control MCDI 199allow mtk_hal_power proc_cpuidle:dir r_dir_perms; 200allow mtk_hal_power proc_cpuidle:file rw_file_perms; 201 202# Date : 2020/06/12 203# Operation: SQC 204# Purpose : Allow powerhal to control mali power policy 205allow mtk_hal_power sysfs_mali_power_policy:file rw_file_perms; 206 207# Date : 2020/06/12 208# Operation: SQC 209# Purpose : Allow powerhal to control displowpower 210allow mtk_hal_power proc_displowpower:dir r_dir_perms; 211allow mtk_hal_power proc_displowpower:file rw_file_perms; 212