1 2# Policy File of /system/bin/connsyslogger Executable File 3 4# ============================================== 5# Type Declaration 6# ============================================== 7# Purpose : for create hidl server 8#hal_server_domain(connsyslogger, mtk_hal_log) 9# ============================================== 10# MTK Policy Rule 11# ============================================== 12 13#for logging sdcard access 14allow connsyslogger fuse:dir { create_dir_perms }; 15allow connsyslogger fuse:file { create_file_perms }; 16 17#consys logger access on /data/consyslog 18allow connsyslogger consyslog_data_file:dir { create_dir_perms relabelto }; 19allow connsyslogger consyslog_data_file:fifo_file { create_file_perms }; 20allow connsyslogger consyslog_data_file:file { create_file_perms }; 21 22#consys logger socket access 23#allow connsyslogger property_socket:sock_file write; 24#allow connsyslogger init:unix_stream_socket connectto; 25 26allow connsyslogger tmpfs:lnk_file { create_file_perms }; 27 28# purpose: avc: denied { read } for name="plat_file_contexts" 29allow connsyslogger file_contexts_file:file { read getattr open map}; 30 31#logger SD logging in factory mode 32allow connsyslogger vfat:dir create_dir_perms; 33allow connsyslogger vfat:file create_file_perms; 34 35#logger permission in storage in android M version 36allow connsyslogger mnt_user_file:dir search; 37allow connsyslogger mnt_user_file:lnk_file read; 38allow connsyslogger storage_file:lnk_file read; 39 40#permission for use SELinux API 41allow connsyslogger rootfs:file r_file_perms; 42 43#permission for storage access storage 44allow connsyslogger storage_file:dir { create_dir_perms }; 45allow connsyslogger storage_file:file { create_file_perms }; 46 47#permission for read boot mode 48allow connsyslogger sysfs_boot_mode:file { read open }; 49 50allow connsyslogger fw_log_wifi_device:chr_file {read write open ioctl}; 51allow connsyslogger fw_log_bt_device:chr_file {read write open ioctl}; 52allow connsyslogger fw_log_gps_device:chr_file {read write open ioctl}; 53allow connsyslogger fw_log_wmt_device:chr_file {read write open ioctl}; 54 55allow connsyslogger sdcardfs:dir { create_dir_perms }; 56allow connsyslogger sdcardfs:file { create_file_perms }; 57allow connsyslogger rootfs:lnk_file getattr; 58 59allow connsyslogger media_rw_data_file:file { create_file_perms }; 60allow connsyslogger media_rw_data_file:dir { create_dir_perms }; 61 62set_prop(connsyslogger, vendor_connsysfw_prop) 63 64allow connsyslogger vendor_configs_file:file map; 65#permission to get driver ready status 66get_prop(connsyslogger, wmt_prop) 67 68#Date:2019/03/25 69# purpose: allow connsyslogger to access persist.meta.connecttype 70get_prop(connsyslogger, meta_connecttype_prop); 71 72#Date:2019/03/25 73# purpose: allow emdlogger to create socket 74allow connsyslogger port:tcp_socket { name_connect name_bind }; 75allow connsyslogger connsyslogger:tcp_socket { create_stream_socket_perms }; 76allow connsyslogger node:tcp_socket node_bind; 77 78#Date:2019/03/25 79# usb device ttyGSx for modem logger usb logging 80allow connsyslogger ttyGS_device:chr_file { rw_file_perms}; 81 82 83