| # ============================================== |
| # Policy File of /system/bin/em_svr Executable File |
| |
| # ============================================== |
| # Type Declaration |
| # ============================================== |
| |
| type em_svr_exec, system_file_type, exec_type, file_type; |
| typeattribute em_svr coredomain; |
| |
| # ============================================== |
| # Common SEPolicy Rule |
| # ============================================== |
| |
| init_daemon_domain(em_svr) |
| |
| # Date: WK1812 |
| # Purpose: add for MD log filter |
| allow em_svr block_device:dir search; |
| allow em_svr sdcardfs:dir w_dir_perms; |
| allow em_svr sdcardfs:file create_file_perms; |
| |
| allow em_svr media_rw_data_file:dir rw_dir_perms; |
| allow em_svr media_rw_data_file:file create_file_perms; |
| |
| # Date: WK1812 |
| # Purpose: add for controlling screen on/off |
| allow em_svr graphics_device:dir search; |
| allow em_svr graphics_device:chr_file rw_file_perms; |
| allow em_svr surfaceflinger_service:service_manager find; |
| binder_use(em_svr) |
| binder_call(em_svr, surfaceflinger) |
| |
| # Date: WK1812 |
| # Purpose: add for controlling backlight |
| allow em_svr sysfs_leds:dir search; |
| |
| # Date: WK1812 |
| # Purpose: add for sensor calibration |
| allow em_svr self:capability { chown fsetid }; |
| |
| # Date: WK1812 |
| # Purpose: add for shell cmd |
| allow em_svr shell_exec:file rx_file_perms; |
| |
| # Date: WK1812 |
| # Purpose: sys file access |
| allow em_svr sysfs:dir r_dir_perms; |