| # ============================================== |
| # Policy File of /system/bin/camerapostalgo Executable File |
| |
| # ============================================== |
| # Common SEPolicy Rule |
| # ============================================== |
| |
| type camerapostalgo_exec, system_file_type, exec_type, file_type; |
| typeattribute camerapostalgo coredomain; |
| init_daemon_domain(camerapostalgo) |
| |
| allow camerapostalgo camerapostalgo_service:service_manager { add find }; |
| |
| allow camerapostalgo gpu_device:dir search; |
| allow camerapostalgo gpu_device:chr_file rw_file_perms; |
| |
| allow camerapostalgo ion_device:chr_file r_file_perms; |
| |
| allow camerapostalgo sdcardfs:dir search; |
| allow camerapostalgo sdcardfs:file r_file_perms; |
| allow camerapostalgo mnt_user_file:dir search; |
| allow camerapostalgo mnt_user_file:lnk_file r_file_perms; |
| |
| allow camerapostalgo storage_file:lnk_file r_file_perms; |
| allow camerapostalgo media_rw_data_file:dir rw_dir_perms; |
| allow camerapostalgo media_rw_data_file:file rw_file_perms; |
| |
| # ipc call |
| binder_use(camerapostalgo) |
| binder_service(camerapostalgo) |
| |
| binder_call(camerapostalgo, platform_app) |
| binder_call(camerapostalgo, surfaceflinger) |
| |
| get_prop(camerapostalgo, system_mtk_debug_bq_dump_prop) |