unplugged-vendor/device/mediatek/sepolicy/basic/non_plat/gbe_native.te

24 lines
844 B
Plaintext

# ==============================================
# Policy File of /vendor/bin/gbe Executable File
# ==============================================
# Type Declaration
# ==============================================
type gbe_native_exec, exec_type, file_type, vendor_file_type;
type gbe_native, domain;
# ==============================================
# MTK Policy Rule
# ==============================================
init_daemon_domain(gbe_native)
allow gbe_native self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
set_prop(gbe_native, vendor_mtk_gbe_prop)
allow gbe_native sysfs_boot_mode:file r_file_perms;
hal_client_domain(gbe_native, hal_power)
allow gbe_native proc_perfmgr:dir r_dir_perms;
allow gbe_native proc_perfmgr:file rw_file_perms;
allowxperm gbe_native proc_perfmgr:file ioctl {
PERFMGR_FPSGO_GBE_GET_CMD
};