SamarV-121 a58d7459e5 sepolicy: isolated_app -> isolated_app_all
* neverallow

Change-Id: If7dbddf30472de3b7c04c2e4f9a27e03e6ada619
2023-10-29 17:44:17 +00:00

24 lines
724 B
Plaintext

# ==============================================
# Common SEPolicy Rule
# ==============================================
# Grant read access to mtk core property type which represents all
# mtk properties except those with ctl_xxx prefix.
# Align Google change: f01453ad453b29dd723838984ea03978167491e5
get_prop(domain, mtk_core_property_type)
# Allow all processes to read /sys/bus/platform/drivers/dev_info/dev_info
# as it is a public interface for all processes to read some OTP data.
allow {
domain
-isolated_app_all
} sysfs_devinfo:file r_file_perms;
# Date : W18.45
# Operation : MTK gpu enable drvb
# Purpose : drvb need dgb2 permission
allow {
domain
-isolated_app_all
} sysfs_gpu_mtk:file r_file_perms;