1# ============================================== 2# MTK Policy Rule 3# ============================================== 4 5# GOOGLE commented out. Causes screenshots to fail. See b/169108544. 6# typeattribute platform_app mlstrustedsubject; 7 8# Date : 2017/07/03 9# Operation : Migration 10# Purpose : get/set agps configuration via mtk_hal_lbs 11hal_client_domain(platform_app, mtk_hal_lbs) 12 13 14# Date : 2014/08/21 15# Operation : Migration 16# Purpose : FMRadio enable driver access permission for fmradio hardware device 17# Package: com.mediatek.fmradio 18allow platform_app fm_device:chr_file rw_file_perms; 19 20# Date : 2014/09/11 21# Operation : Migration 22# Purpose : MTKLogger need setup local socket with native daemon:mobile_logd, 23# netdialog,mdlogger,emdlogger,cmddumper 24# Package: com.mediatek.mtklogger 25allow platform_app mobile_log_d:unix_stream_socket connectto; 26allow platform_app mdlogger:unix_stream_socket connectto; 27allow platform_app emdlogger:unix_stream_socket connectto; 28allow platform_app cmddumper:unix_stream_socket connectto; 29allow platform_app connsyslogger:unix_stream_socket connectto; 30unix_socket_connect(platform_app, netdiag, netdiag) 31# Date: 2018/11/17 32# purpose: allow MTKLogger to control Bluetooth HCI log via socket 33allow platform_app bluetooth:unix_stream_socket connectto; 34 35# Date : 2014/10/17 36# Operation : Migration 37# Purpose :Make MTKLogger or VIASaber apk can Access TTYSDIO_device 38# Package: com.mediatek.mtklogger 39allow platform_app ttySDIO_device:chr_file rw_file_perms; 40 41# Date : 2014/10/17 42# Operation : Migration 43# Purpose :Make MTKLogger or VIASaber apk can Access storage 44# Package: com.mediatek.mtklogger 45allow platform_app sdcard_type:file create_file_perms; 46allow platform_app sdcard_type:dir create_dir_perms; 47 48# Date : 2014/11/12 49# Operation : Migration 50# Purpose : MTKLogger need copy exception db from data folder 51# Package: com.mediatek.mtklogger 52allow platform_app aee_exp_data_file:file r_file_perms; 53allow platform_app aee_exp_data_file:dir r_dir_perms; 54 55# Date : 2014/11/14 56# Operation : Migration 57# Purpose : MTKLogger need update md config file in data for mode changed 58# Package: com.mediatek.mtklogger 59allow platform_app mdlog_data_file:file rw_file_perms; 60allow platform_app mdlog_data_file:dir rw_dir_perms; 61 62# Date : 2015/01/13 63# Operation : New feature for GPS Log 64# Purpose : MTKLogger need setup local socket with mnld 65# Package: com.mediatek.mtklogger 66# TODO:: MTK need to remove later 67not_full_treble(` 68 allow platform_app mnld:unix_stream_socket connectto; 69') 70 71# Date : WK17.46 72# Operation : Migration 73# Purpose : allow MTKLogger to read KE DB 74allow platform_app aee_dumpsys_data_file:file r_file_perms; 75 76# Date : WK18.17 77# Operation : P Migration 78# Purpose: allow platform_app to read /data/vendor/mtklog/aee_exp 79allow platform_app aee_exp_vendor_file:dir search; 80allow platform_app aee_exp_vendor_file:dir { read getattr open }; 81allow platform_app aee_exp_vendor_file:file { read getattr open }; 82 83# Date : WK18.21 84# Operation : Migration 85# Purpose : Do FM operation via mtk_hal_fm 86hal_client_domain(platform_app, mtk_hal_fm) 87 88# Date: 2018/03/23 89# Operation : Migration 90# Purpose : MTKLogger need connect to log hidl server 91# Package: com.mediatek.mtklogger 92hal_client_domain(platform_app, mtk_hal_log) 93 94# Date: 2019/07/04 95# Stage: Migration 96# Purpose: Allow to use lomo effect 97# Package: com.mediatek.camera 98#allow platform_app hal_camera_hwservice:hwservice_manager find; 99allow platform_app mtk_hal_camera:binder call; 100allow platform_app sw_sync_device:chr_file rw_file_perms; 101 102# Date: 2019/07/04 103# Purpose: Allow platform app to use BGService HIDL and access mtk_hal_camera 104hal_client_domain(platform_app, mtk_hal_bgs) 105allow platform_app mtk_hal_bgs_hwservice:hwservice_manager find; 106binder_call(platform_app, mtk_hal_bgs) 107binder_call(mtk_hal_bgs, platform_app) 108binder_call(platform_app, mtk_hal_camera) 109binder_call(mtk_hal_camera, platform_app) 110 111# Date: 2020/06/08 112# Purpose: Allow platform app to access mtk jpeg 113allow platform_app proc_mtk_jpeg:file rw_file_perms; 114allowxperm platform_app proc_mtk_jpeg:file ioctl { 115 JPG_BRIDGE_DEC_IO_LOCK 116 JPG_BRIDGE_DEC_IO_WAIT 117 JPG_BRIDGE_DEC_IO_UNLOCK 118}; 119