sepolicy/cmddumper.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

# ==============================================
# Policy File of /system/bin/cmddumper Executable File 

# ==============================================
# Type Declaration
# ==============================================
type cmddumper, domain;
type cmddumper_exec, exec_type, file_type;

# ==============================================
# MTK Policy Rule
# ==============================================
init_daemon_domain(cmddumper)

#============= cmddumper ==============
allow cmddumper mdlog_data_file:fifo_file create_file_perms;
allow cmddumper mdlog_data_file:file create_file_perms;
allow cmddumper mdlog_data_file:dir { create_dir_perms relabelto };
allow cmddumper ttySDIO_device:chr_file { read write ioctl open };
allow cmddumper fuse:dir create_dir_perms;
allow cmddumper fuse:file create_file_perms;

allow cmddumper init:unix_stream_socket connectto;
allow cmddumper property_socket:sock_file { write read };
allow cmddumper platform_app:unix_stream_socket connectto;

allow cmddumper shell_exec:file { read execute open execute_no_trans };
allow cmddumper system_file:file execute_no_trans;

allow cmddumper debug_mdlogger_prop:property_service set;
allow cmddumper debug_prop:property_service set;

#allow cmddumper tmpfs:lnk_file read;
allow cmddumper system_data_file:dir { write create open add_name relabelfrom relabelto};