| # ============================================== |
| # Common SEPolicy Rule |
| # ============================================== |
| |
| # Date : WK15.30 |
| # Operation : Migration |
| # Purpose : for device bring up, not to block early migration/sanity |
| allow system_server aal_service:service_manager find; |
| |
| # Date : 2017/01/24 |
| # Purpose : Add permission for DRM / DRI GPU driver |
| allow system_server gas_srv_service:service_manager find; |
| |
| # Date : 2017/4/14 |
| # Purpose : Add permission for registering MtkTelecomService to ServiceManager |
| allow system_server mtk_telecom_service:service_manager add; |
| |
| # Date : 2017/09/15 |
| # Purpose : Add mtk_connmetrics_service for CTA's celluar data control |
| allow system_server mtk_connmetrics_service:service_manager add; |
| |
| # Date:W17.20 |
| # Operation : wifioffload hal developing |
| # Purpose : Allow to use HAL Wfo |
| hal_client_domain(system_server, hal_mtk_wfo) |
| |
| # Date : W17.26 |
| # Purpose: Allow to use phoneEx |
| allow system_server mtk_radio_service:service_manager find; |
| |
| # Date : 2017/10/09 |
| # Purpose : Record and get permission |
| allow system_server mtk_permrecords_service:service_manager add; |
| |
| # Date : W17.36 |
| # Operation : Migration |
| # Purpose : Allow system_server to add anrmanager |
| allow system_server mtk_anrmanager_service:service_manager add; |
| |
| # Date: W17.42 |
| # Operation : Migration |
| # Purpose : for WFD functionality |
| set_prop(system_server, system_mtk_media_wfd_prop) |
| set_prop(system_server, wifi_prop) |
| |
| # Date:W17.47 |
| # Purpose : Allow to enable/disable log too much |
| set_prop(system_server, system_mtk_logmuch_prop) |
| binder_call(system_server, hal_mtk_fm) |
| |
| # Date: 2018/07/04 |
| # Operation: P migration |
| # Purpose : allow radio get vzw device type property |
| get_prop(system_server, system_mtk_persist_vendor_vzw_device_type_prop) |
| |
| # Date : 2018/07/03 |
| # Stage: Migration |
| # Purpose: allow system server to get RTT property |
| get_prop(system_server, system_mtk_rtt_prop) |
| |
| # Date : W18.27 |
| # Operation : Migration |
| allow system_server mtk_data_shaping_service:service_manager add; |
| |
| # Date : W18.28 |
| # Operation : Support telephony log |
| get_prop(system_server, system_mtk_em_tel_log_prop) |
| |
| # Date : W18.29 |
| # Operation : For background data disable function |
| get_prop(system_server, system_mtk_bgdata_disabled_prop) |
| |
| # Date : W18.24 |
| # Operation : for AMS log |
| set_prop(system_server, system_mtk_amslog_prop) |
| |
| # Date : W18.25 |
| # Operation : for AMS-aal |
| set_prop(system_server, system_mtk_amsaal_prop) |
| |
| # Date : W18.31 |
| # Purpose : Support Trustonic TeeService |
| binder_call(system_server, teed_app) |
| binder_call(system_server, teeregistryd_app) |
| allow system_server tee_service:service_manager find; |
| allow system_server teeregistry_service:service_manager find; |
| |
| # Date : W19.12 |
| # Operation : For DuraSpeed Migration |
| set_prop(system_server, system_mtk_duraspeed_drop_caches_prop) |
| |
| # Date : W19.12 |
| # Operation : For DuraSpeed Migration |
| allow system_server mtk_duraspeed_service:service_manager add; |
| |
| # Date : 2019/06/03 |
| # Operation : Q Migration split build |
| # Purpose : allow to get system_mtk_rsc_sys_prop |
| get_prop(system_server, system_mtk_rsc_sys_prop) |
| |
| # Date : W19.29 |
| # Operation : Support heavy loading |
| get_prop(system_server, system_mtk_heavy_loading_prop) |
| |
| # Date : WK19.29 |
| # Operation : touchll hal |
| # Purpose : touchll hal permission |
| hal_client_domain(system_server, hal_mtk_touchll) |
| |
| # Date: 2020/01/16 |
| # Purpose : Allow system server to read tll dev |
| allow system_server tll_device:chr_file r_file_perms; |
| |
| # Date : 2020/03/20 |
| # Operation: R migration |
| get_prop(system_server, system_mtk_telecom_vibrate_prop) |
| |
| # Date:2020/03/26 |
| # Operation:Q Migration |
| allow system_server proc_battery_cmd:dir search; |
| |
| # Date : 2020/04/14 |
| # Purpose: Allow ConnectivityService to get USB tethering system property for auto test |
| get_prop(system_server, system_mtk_usb_tethering_prop) |
| |
| # Date : 2020/05/18 |
| # Operation : R Migration |
| get_prop(system_server, system_mtk_graphics_sf_gll_ro_prop) |
| |
| # Date : 2020/05/19 |
| # Purpose : Add mtk_autoboot_service for CTA's autoboot app control |
| allow system_server mtk_autoboot_service:service_manager add; |
| |
| # Date : 2020/06/01 |
| # Operation : R Migration |
| allow system_server sysfs_HDMI_audio_extcon_state:file r_file_perms; |
| |
| # Date : 2020/07/13 |
| # Purpose : Add permission for AMS access to report Java Layer Exception |
| allow system_server crash_dump:process { getpgid setsched }; |
| |
| # Date : 2020/07/20 |
| # Purpose : Add permission for AMS access to report Java Layer Exception |
| allow system_server zygote:process getpgid; |
| |
| # Date : 2020/07/23 |
| # Purpose : Add permission for AMS access to report Java Layer Exception |
| allow system_server app_zygote:process getpgid; |
| |
| # Date:2020/07/27 |
| # Operation:R Migration |
| allow system_server installd:process signal; |
| |
| # Date:2020/09/04 |
| # Operation:R Migration, add permission for AMS dump binderinfo when ANR happened in user load |
| allow system_server binderfs_logs:dir r_dir_perms; |
| allow system_server binderfs_logs:file r_file_perms; |
| allow system_server binderfs_logs_proc:dir r_dir_perms; |
| allow system_server binderfs_logs_proc:file r_file_perms; |
| |
| # Date:2020/09/24 |
| # Operation:R Migration, add permission for PMS access /data/media |
| allow system_server media_rw_data_file:dir setattr; |
| |
| # Date:2020/09/25 |
| # Operation:R Migration, don't audit for PMS access /mnt/media_rw/XXXX-XXXX/Android/obb |
| dontaudit system_server vfat:dir r_dir_perms; |
| |
| # Date:2021/11/13 |
| # Operation: Add for DSDA in Telecom, add permission for accessing vendor.radio.dsda.state |
| get_prop(system_server, system_mtk_common_data_prop) |
| |