Home | History | Annotate | Download | only in sepolicy 
      1 # permissions for /system/bin/dump_bq25892.sh
      2 # which is used to debug information about the state of the charger chip
      3 type dump_bq25892, domain, domain_deprecated;
      4 type dump_bq25892_exec, exec_type, file_type;
      5 type fw_logs_data_file, file_type, data_file_type;
      6 
      7 init_daemon_domain(dump_bq25892)
      8 
      9 # Run a shell.
     10 allow dump_bq25892 shell_exec:file rx_file_perms;
     11 
     12 # Run toybox.
     13 allow dump_bq25892 toolbox_exec:file rx_file_perms;
     14 
     15 # Use fwtool to communicate with the EC through /dev/cros_ec
     16 allow dump_bq25892 fwtool_exec:file rx_file_perms;
     17 allow dump_bq25892 cros_ec_device:chr_file rw_file_perms;
     18 
     19 # write and set world readable attribute on /data/misc/fw_logs/bq25892.txt log file
     20 allow dump_bq25892 fw_logs_data_file:file create_file_perms;
     21 allow dump_bq25892 fw_logs_data_file:dir  w_dir_perms;
     22