1# ============================================== 2# MTK Policy Rule 3# ============================================== 4 5# Purpose: access for SYS_MEMORY_INFO 6allow dumpstate fuse:dir { w_dir_perms }; 7allow dumpstate fuse:file { write create open setattr append }; 8 9# Purpose: mnt/user/* 10allow dumpstate mnt_user_file:dir search; 11allow dumpstate mnt_user_file:lnk_file read; 12 13# Purpose: /storage/* 14allow dumpstate storage_file:lnk_file read; 15 16# Purpose: timer_intval. this is neverallow 17#allow dumpstate app_data_file:dir search; 18allow dumpstate kmsg_device:chr_file r_file_perms; 19 20# Purpose: 21# 01-01 18:00:35.600 7723 7723 I ps : type=1400 audit(0.0:63712): avc: 22# denied { ioctl } for path="/storage/emulated/0/mtklog/aee_exp/temp/db.PQtNt4/ 23# SYS_ALL_THREADS" dev="fuse" ino=209 ioctlcmd=5401 scontext=u:r:dumpstate:s0 24# tcontext=u:object_r:fuse:s0 tclass=file permissive=1 25allow dumpstate fuse:file ioctl; 26 27# Purpose: 28# 01-01 17:59:14.440 7664 7664 I aee_dumpstate: type=1400 audit(0.0:63497): 29# avc: denied { open } for path="/sys/kernel/debug/tracing/tracing_on" dev= 30# "debugfs" ino=2087 scontext=u:r:dumpstate:s0 tcontext=u:object_r: 31# tracing_shell_writable:s0 tclass=file permissive=1 32allow dumpstate debugfs_tracing:file { write read open }; 33 34# Data : WK17.03 35# Purpose: Allow to access gpu 36allow dumpstate gpu_device:dir search; 37 38# Date: 2017/07/11 39# Purpose: 01-01 08:30:57.474 286 286 E SELinux : avc: denied { find } for interface= 40# android.hardware.camera.provider::ICameraProvider pid=3133 scontext=u:r:dumpstate:s0 tcontext= 41# u:object_r:hal_camera_hwservice:s0 tclass=hwservice_manager 42hal_client_domain(dumpstate, hal_camera) 43allow dumpstate hal_camera_hwservice:hwservice_manager find; 44 45#Purpose: Allow dumpstate to read/write /sys/kernel/debug/tracing/buffer_total_size_kb 46userdebug_or_eng(`allow dumpstate debugfs_tracing_debug:file { r_file_perms write };') 47 48# Purpose: Allow dumpstate to write /sys/devices/virtual/timed_output/vibrator/enable 49allow dumpstate sysfs_vibrator:file write; 50 51# Purpose : Allow dumpstate self to sys_nice 52allow dumpstate self:capability sys_nice; 53 54# Date: W1826 55# Purpose : mobile_log_d exec 'logcat -L' via dumpstate 56allow dumpstate mobile_log_d:fd use; 57allow dumpstate mobile_log_d:fifo_file write; 58allow dumpstate mobile_log_d:unix_stream_socket { read write }; 59