1
2# Policy File of /system/bin/connsyslogger Executable File
3
4# ==============================================
5# Type Declaration
6# ==============================================
7# Purpose : for create hidl server
8#hal_server_domain(connsyslogger, mtk_hal_log)
9# ==============================================
10# MTK Policy Rule
11# ==============================================
12
13#for logging sdcard access
14allow connsyslogger fuse:dir { create_dir_perms };
15allow connsyslogger fuse:file { create_file_perms };
16
17#consys logger access on /data/consyslog
18allow connsyslogger consyslog_data_file:dir { create_dir_perms relabelto };
19allow connsyslogger consyslog_data_file:fifo_file { create_file_perms };
20allow connsyslogger consyslog_data_file:file { create_file_perms };
21
22#consys logger socket access
23#allow connsyslogger property_socket:sock_file write;
24#allow connsyslogger init:unix_stream_socket connectto;
25
26allow connsyslogger tmpfs:lnk_file { create_file_perms };
27
28# purpose: avc: denied { read } for name="plat_file_contexts"
29allow connsyslogger file_contexts_file:file { read getattr open map};
30
31#logger SD logging in factory mode
32allow connsyslogger vfat:dir create_dir_perms;
33allow connsyslogger vfat:file create_file_perms;
34
35#logger permission in storage in android M version
36allow connsyslogger mnt_user_file:dir search;
37allow connsyslogger mnt_user_file:lnk_file read;
38allow connsyslogger storage_file:lnk_file read;
39
40#permission for use SELinux API
41allow connsyslogger rootfs:file r_file_perms;
42
43#permission for storage access storage
44allow connsyslogger storage_file:dir { create_dir_perms };
45allow connsyslogger storage_file:file { create_file_perms };
46
47#permission for read boot mode
48allow connsyslogger sysfs_boot_mode:file { read open };
49
50allow connsyslogger fw_log_wifi_device:chr_file {read write open ioctl};
51allow connsyslogger fw_log_bt_device:chr_file {read write open ioctl};
52allow connsyslogger fw_log_gps_device:chr_file {read write open ioctl};
53allow connsyslogger fw_log_wmt_device:chr_file {read write open ioctl};
54
55allow connsyslogger sdcardfs:dir { create_dir_perms };
56allow connsyslogger sdcardfs:file { create_file_perms };
57allow connsyslogger rootfs:lnk_file getattr;
58
59allow connsyslogger media_rw_data_file:file  { create_file_perms };
60allow connsyslogger media_rw_data_file:dir { create_dir_perms };
61
62set_prop(connsyslogger, vendor_connsysfw_prop)
63
64allow connsyslogger vendor_configs_file:file map;
65#permission to get driver ready status
66get_prop(connsyslogger, wmt_prop)
67
68#Date:2019/03/25
69# purpose: allow connsyslogger to access persist.meta.connecttype
70get_prop(connsyslogger, meta_connecttype_prop);
71
72#Date:2019/03/25
73# purpose: allow emdlogger to create socket
74allow connsyslogger port:tcp_socket { name_connect name_bind };
75allow connsyslogger connsyslogger:tcp_socket { create_stream_socket_perms };
76allow connsyslogger node:tcp_socket node_bind;
77
78#Date:2019/03/25
79# usb device ttyGSx for modem logger usb logging
80allow connsyslogger ttyGS_device:chr_file { rw_file_perms};
81
82
83