NekoSakura/Android_Device_Mediatek_Sepolicy_Vndr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

basic: non_plat: Address init.insmod.sh denials

Browse Source 
Change-Id: I2b858d17db6b8edf07f34f12f38342ae519056c8
Signed-off-by: Woomymy <woomy@woomy.be>
This commit is contained in:
Woomymy 2024-02-15 12:02:05 +00:00 committed by bengris32
parent 40ea9e1bf7
commit ab2549b89a
No known key found for this signature in database
GPG Key ID: 5C798EC5589ED9BF
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
basic/non_plat/init_insmod_sh.te
View File

@ -12,6 +12,13 @@ allow init_insmod_sh kernel:key search;
# Purpose : modprobe need proc_modules # Purpose : modprobe need proc_modules
allow init_insmod_sh proc_modules:file r_file_perms; allow init_insmod_sh proc_modules:file r_file_perms;
# Allow init.insmod.sh to read cmdline
allow init_insmod_sh proc_cmdline:file r_file_perms;
# Allow required capabilities for modprobe
allow init_insmod_sh self:capability sys_nice;
allow init_insmod_sh kernel:process setsched;
# Date : WK20.46 # Date : WK20.46
# Purpose : Set the vendor.all.modules.ready property # Purpose : Set the vendor.all.modules.ready property
set_prop(init_insmod_sh, vendor_mtk_device_prop) set_prop(init_insmod_sh, vendor_mtk_device_prop)