You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
63 lines
2.4 KiB
63 lines
2.4 KiB
# ============================================== |
|
# Policy File of /system/bin/volte_stack Executable File |
|
|
|
# ============================================== |
|
# Type Declaration |
|
# ============================================== |
|
type volte_stack, domain, mtkimsmddomain; |
|
type volte_stack_exec, exec_type, file_type, vendor_file_type; |
|
|
|
# ============================================== |
|
# MTK Policy Rule |
|
# ============================================== |
|
#permissive volte_stack; |
|
init_daemon_domain(volte_stack) |
|
net_domain(volte_stack) |
|
|
|
file_type_auto_trans(volte_stack, system_data_file, ims_ipsec_data_file) |
|
|
|
# Date : WK14.42 |
|
# Operation : Migration |
|
# Purpose : for VoLTE L early bring up and first call |
|
allow volte_stack socket_device:sock_file write; |
|
allow volte_stack self:key_socket { write read create setopt }; |
|
allow volte_stack self:capability net_admin; |
|
allow volte_stack self:capability { setuid setgid }; |
|
allow volte_stack self:tcp_socket { bind create setopt listen }; |
|
allow volte_stack self:udp_socket { write bind read setopt }; |
|
allow volte_stack self:udp_socket create; |
|
allow volte_stack self:tcp_socket shutdown; |
|
allow volte_stack self:udp_socket shutdown; |
|
allow volte_stack node:tcp_socket node_bind; |
|
allow volte_stack node:udp_socket node_bind; |
|
allow volte_stack port:tcp_socket name_bind; |
|
allow volte_stack port:udp_socket name_bind; |
|
|
|
# Date : 2015/01/07 |
|
# Operation : Migration |
|
# Purpose : for VoLTE L Pre-FT test, Pre-FT error show we need add tcp rule |
|
allow volte_stack self:tcp_socket accept; |
|
allow volte_stack self:tcp_socket read; |
|
allow volte_stack self:tcp_socket write; |
|
allow volte_stack self:tcp_socket getattr; |
|
allow volte_stack self:tcp_socket connect; |
|
allow volte_stack port:tcp_socket name_connect; |
|
|
|
allow volte_stack volte_stack_socket:sock_file write; |
|
|
|
# Date : 2016/06/21 |
|
# Operation : ims_ipsec_lib performance |
|
# Purpose : use netlink |
|
allow volte_stack init:unix_stream_socket connectto; |
|
allow volte_stack property_socket:sock_file write; |
|
allow volte_stack self:netlink_xfrm_socket { write bind create read nlmsg_write nlmsg_read}; |
|
allow volte_stack system_prop:property_service set; |
|
|
|
# to NETD |
|
allow volte_stack netd:unix_stream_socket connectto; |
|
allow volte_stack netd_socket:sock_file write; |
|
allow netd volte_stack:fd use; |
|
allow netd volte_stack:tcp_socket { read write setopt getopt }; |
|
allow netd volte_stack:udp_socket {read write setopt getopt}; |
|
|
|
allow volte_stack self:tcp_socket getopt;
|
|
|