# ============================================== # Common SEPolicy Rule # ============================================== # Date : WK15.15 # Operation : Migration # Purpose : set specific label for used raw partitions, for dumchar cases. allow init system_block_device:blk_file relabelfrom; allow init nvram_device:blk_file relabelto; allow init nvdata_device:blk_file relabelto; allow init nvcfg_block_device:blk_file relabelto; allow init expdb_block_device:blk_file relabelto; allow init misc2_block_device:blk_file relabelto; allow init logo_block_device:blk_file relabelto; allow init para_block_device:blk_file relabelto; allow init tee_block_device:blk_file relabelto; allow init seccfg_block_device:blk_file relabelto; allow init secro_block_device:blk_file relabelto; allow init frp_block_device:blk_file relabelto; allow init userdata_block_device:blk_file relabelto; allow init mtk_hal_dfps_exec:file getattr; # Operation : Migration # Purpose : for init reboot operate /dev/RT_Monitor when enable hang detect allow init RT_Monitor_device:chr_file rw_file_perms; # Purpose : For DuraSpeed allow init proc_drop_caches:file w_file_perms; allow init teei_client_device:chr_file rw_file_perms; # Date : W19.28 # Purpose: Allow to setattr for duraspeed.rc allow init proc_cpu_loading:file setattr; allow init proc_pressure_cpu:file setattr; # Date : W20.20 # Purpose: Allow to create socket for rild allow init volte_imsvt1_socket:sock_file create_file_perms;