1# ============================================== 2# MTK Policy Rule 3# ============================================== 4 5set_prop(vendor_init, vendor_mtk_mediatek_prop) 6set_prop(vendor_init, vendor_mtk_md_version_prop) 7set_prop(vendor_init, vendor_mtk_volte_prop) 8set_prop(vendor_init, vendor_mtk_radio_prop) 9set_prop(vendor_init, vendor_mtk_ril_mode_prop) 10set_prop(vendor_init, vendor_mtk_wmt_prop) 11set_prop(vendor_init, vendor_mtk_coredump_prop) 12 13allow vendor_init proc_wmtdbg:file w_file_perms; 14 15allow vendor_init proc_cpufreq:file w_file_perms; 16allow vendor_init proc_bootprof:file write; 17allow vendor_init proc_pl_lk:file w_file_perms; 18allow vendor_init rootfs:dir { write add_name setattr }; 19allow vendor_init self:capability sys_module; 20 21allow vendor_init tmpfs:dir { write create add_name }; 22allow vendor_init unlabeled:dir { relabelfrom getattr setattr search }; 23allow vendor_init vendor_file:system module_load; 24 25allow vendor_init kmsg_device:chr_file unlink; 26set_prop(vendor_init, system_mtk_persist_mtk_aee_prop) 27set_prop(vendor_init, vendor_mtk_ro_aee_prop) 28set_prop(vendor_init, vendor_mtk_sensor_prop) 29set_prop(vendor_init, vendor_mtk_usb_prop) 30set_prop(vendor_init, vendor_mtk_ct_volte_prop) 31set_prop(vendor_init, vendor_mtk_gps_support_prop) 32set_prop(vendor_init, vendor_mtk_rat_config_prop) 33set_prop(vendor_init, vendor_mtk_tel_switch_prop) 34set_prop(vendor_init, vendor_mtk_aal_ro_prop) 35set_prop(vendor_init, vendor_mtk_pq_ro_prop) 36set_prop(vendor_init, vendor_mtk_default_prop) 37set_prop(vendor_init, vendor_mtk_nn_option_prop) 38set_prop(vendor_init, vendor_mtk_emmc_support_prop) 39set_prop(vendor_init, vendor_mtk_anr_support_prop) 40set_prop(vendor_init, vendor_mtk_antutu_prop) 41set_prop(vendor_init, vendor_mtk_bt_sap_enable_prop) 42 43# allow create symbolic link, /mnt/sdcard, for meta/factory mode 44allow vendor_init tmpfs:lnk_file create; 45 46set_prop(vendor_init, vendor_mtk_cxp_vendor_prop) 47 48# Run "ifup lo" to bring up the localhost interface 49allow vendor_init proc_hostname:file w_file_perms; 50allow vendor_init self:udp_socket { create ioctl }; 51# in addition to unpriv ioctls granted to all domains, init also needs: 52allowxperm vendor_init self:udp_socket ioctl { SIOCSIFFLAGS }; 53allow vendor_init self:global_capability_class_set net_raw; 54 55# enhance boot time 56allow vendor_init proc_perfmgr:file write; 57 58# allow create symbolic link, /mnt/sdcard, for meta/factory mode 59allow vendor_init tmpfs:lnk_file create; 60 61set_prop(vendor_init, vendor_mtk_appresolutiontuner_prop) 62 63# fullscreen switch 64set_prop(vendor_init, vendor_mtk_fullscreenswitch_prop) 65 66# for kernel module verification support, allow vendor domain to search kernel keyring 67allow vendor_init kernel:key search; 68 69# Purpose: /dev/block/mmcblk0p10 70allow vendor_init expdb_block_device:blk_file rw_file_perms; 71 72set_prop(vendor_init, vendor_mtk_wifi_hotspot_prop) 73set_prop(vendor_init, vendor_mtk_persist_aeev_prop) 74set_prop(vendor_init, vendor_mtk_powerhal_prop) 75 76# mmstat tracer 77allow vendor_init debugfs_tracing_instances:dir create_dir_perms; 78allow vendor_init debugfs_tracing_instances:file w_file_perms; 79 80#boot tracer 81allow vendor_init debugfs_tracing_debug:file w_file_perms; 82 83# Date : 2019/11/21 84# Operation: SQC 85# Purpose : Allow vendor_init to control MCDI 86allow vendor_init proc_cpuidle:file rw_file_perms; 87 88# Date : 2020/07/08 89# Purpose: add permission for /proc/sys/vm/swappiness 90allow vendor_init proc_swappiness:file w_file_perms; 91