1# ==============================================
2# Policy File of /vendor/bin/atci_service Executable File
3# ==============================================
4
5# ==============================================
6# MTK Policy Rule
7# ==============================================
8type atci_service, domain;
9type atci_service_exec, exec_type, file_type, vendor_file_type;
10
11init_daemon_domain(atci_service)
12
13allow atci_service block_device:dir search;
14allow atci_service misc2_block_device:blk_file { open read write };
15allow atci_service misc2_device:chr_file { open read write };
16allow atci_service camera_isp_device:chr_file { read write ioctl open };
17allow atci_service graphics_device:chr_file { read write ioctl open };
18allow atci_service graphics_device:dir search;
19allow atci_service kd_camera_hw_device:chr_file { read write ioctl open };
20allow atci_service self:capability { sys_nice ipc_lock };
21allow atci_service nvram_device:chr_file { read write open ioctl };
22allow atci_service camera_isp_device:chr_file { read write ioctl open };
23allow atci_service camera_sysram_device:chr_file { read ioctl open };
24allow atci_service camera_tsf_device:chr_file rw_file_perms;
25allow atci_service camera_rsc_device:chr_file rw_file_perms;
26allow atci_service camera_gepf_device:chr_file rw_file_perms;
27allow atci_service camera_fdvt_device:chr_file rw_file_perms;
28allow atci_service camera_wpe_device:chr_file rw_file_perms;
29allow atci_service camera_owe_device:chr_file rw_file_perms;
30allow atci_service kd_camera_flashlight_device:chr_file { read write ioctl open };
31allow atci_service ccu_device:chr_file { read write ioctl open };
32allow atci_service vpu_device:chr_file { read write ioctl open };
33allow atci_service MTK_SMI_device:chr_file { open read write ioctl };
34allow atci_service DW9714AF_device:chr_file { read write ioctl open };
35allow atci_service devmap_device:chr_file { open read write ioctl };
36allow atci_service sdcard_type:dir { search write read open add_name remove_name create getattr setattr };
37allow atci_service sdcard_type:file { setattr read create write getattr unlink open append };
38allow atci_service mediaserver:binder call;
39#allow atci_service system_server:unix_stream_socket { read write };
40allow atci_service self:capability sys_boot;
41
42# Date : 2015/09/17
43# Operation : M-Migration
44# Purpose : to operation CCT tool
45allow atci_service nvram_device:blk_file { open read write };
46allow atci_service input_device:dir { open read search };
47allow atci_service input_device:file { open read write ioctl };
48allow atci_service input_device:chr_file { open read write ioctl };
49allow atci_service MAINAF_device:chr_file { open read write ioctl };
50allow atci_service MAIN2AF_device:chr_file { open read write ioctl };
51allow atci_service SUBAF_device:chr_file { open read write ioctl };
52allow atci_service tmpfs:lnk_file read;
53allow atci_service self:capability2 block_suspend;
54
55# Date : 2015/10/13
56# Operation : M-Migration
57# Purpose : to operation CCT tool
58#allow atci_service mediaserver_service:service_manager find;
59allow atci_service mnt_user_file:dir search;
60allow atci_service mnt_user_file:lnk_file read;
61#allow atci_service mtk_perf_service:service_manager find;
62#allow atci_service sensorservice_service:service_manager find;
63allow atci_service storage_file:lnk_file read;
64#allow atci_service media_rw_data_file:dir { write search create add_name };
65#allow atci_service media_rw_data_file:file { read write create open };
66
67#============= atci_service ==============
68allow atci_service CAM_CAL_DRV_device:chr_file { read write ioctl open};
69
70set_prop(atci_service, mtk_em_prop)
71
72# Date : 2016/03/02
73# Operation : M-Migration
74# Purpose : to support ATCI touch tool
75allow atci_service vendor_shell_exec:file { read execute open execute_no_trans };
76
77# Date : WK16.33
78# Purpose: Allow to access ged for gralloc_extra functions
79allow atci_service proc_ged:file rw_file_perms;
80
81# Date : WK16.35
82# Operation : Migration
83# Purpose : Update camera flashlight driver device file
84allow atci_service flashlight_device:chr_file { read write ioctl open };
85
86# Date : WK17.01
87# Operation : Migration
88# Purpose : Update AT_Command NFC function
89allow atci_service factory_data_file:sock_file write;
90
91# Date : WK17.23
92# Stage: O Migration, SQC
93# Purpose: Allow to use HAL PQ
94hal_client_domain(atci_service, hal_pq)
95
96# Date : WK17.28
97# Purpose : Allow to execute battery command
98allow atci_service MT_pmic_adc_cali_device:chr_file rw_file_perms;
99
100# Date : WK17.43
101# Purpose : CCT
102allow atci_service CAM_CAL_DRV_device:chr_file rw_file_perms;
103allow atci_service CAM_CAL_DRV1_device:chr_file rw_file_perms;
104allow atci_service CAM_CAL_DRV2_device:chr_file rw_file_perms;
105allow atci_service fwk_sensor_hwservice:hwservice_manager find;
106allow atci_service hidl_allocator_hwservice:hwservice_manager find;
107allow atci_service hidl_memory_hwservice:hwservice_manager find;
108allow atci_service ion_device:chr_file { read ioctl open };
109allow atci_service mtk_cmdq_device:chr_file { read ioctl open };
110allow atci_service mtk_mdp_device:chr_file rw_file_perms;
111allow atci_service sw_sync_device:chr_file rw_file_perms;
112allow atci_service mtk_hal_power:binder call;
113allow atci_service mtk_hal_power_hwservice:hwservice_manager find;
114allow atci_service sysfs_batteryinfo:dir search;
115allow atci_service sysfs_batteryinfo:file { read getattr open };
116allow atci_service system_file:dir { read open };
117allow atci_service camera_pipemgr_device:chr_file { read ioctl open };
118allow atci_service mtkcam_prop:file { read getattr open };
119allow atci_service mtk_hal_camera:binder call;
120allow atci_service debugfs_ion:dir search;
121allow atci_service sysfs_tpd_setting:file { read write open getattr };
122allow atci_service sysfs_vibrator_setting:file { read write open getattr };
123allow atci_service sysfs_leds_setting:file { read write open getattr };
124allow atci_service vendor_toolbox_exec:file { read getattr open execute execute_no_trans };
125
126# Date : WK18.21
127# Purpose: Allow to use HIDL
128hwbinder_use(atci_service)
129hal_client_domain(atci_service, hal_atci)
130
131# Date : WK18.26
132# Purpose: Allow gps socket sendto
133allow atci_service mnld:unix_dgram_socket sendto;
134
135# Date : WK18.35
136# Purpose : allow CCT to allocate memory
137hal_client_domain(atci_service, hal_allocator);
138