NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
android_device_mediatek_sep.../non_plat/aee_aed.te

64 lines
2.0 KiB
Plaintext
Raw Normal View History

import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
2020-01-18 09:29:32 +08:00
# ==============================================
# Policy File of /system/bin/aee_aed Executable File
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK14.32
# Operation : AEE UT
# Purpose : for AEE module
allow aee_aed aed_device:chr_file rw_file_perms;
allow aee_aed expdb_device:chr_file rw_file_perms;
allow aee_aed expdb_block_device:blk_file rw_file_perms;
allow aee_aed bootdevice_block_device:blk_file rw_file_perms;
allow aee_aed etb_device:chr_file rw_file_perms;
# open/dev/mtd/mtd12 failed(expdb)
allow aee_aed mtd_device:dir create_dir_perms;
allow aee_aed mtd_device:chr_file rw_file_perms;
# NE flow: /dev/RT_Monitor
allow aee_aed RT_Monitor_device:chr_file r_file_perms;
#data/aee_exp
allow aee_aed aee_exp_data_file:dir create_dir_perms;
allow aee_aed aee_exp_data_file:file create_file_perms;
#data/dumpsys
allow aee_aed aee_dumpsys_data_file:dir create_dir_perms;
allow aee_aed aee_dumpsys_data_file:file create_file_perms;
#/data/core
allow aee_aed aee_core_data_file:dir create_dir_perms;
allow aee_aed aee_core_data_file:file create_file_perms;
# /data/data_tmpfs_log
allow aee_aed data_tmpfs_log_file:dir create_dir_perms;
allow aee_aed data_tmpfs_log_file:file create_file_perms;
# Purpose: aee_aed set property
set_prop(aee_aed, persist_mtk_aee_prop);
set_prop(aee_aed, persist_aee_prop);
set_prop(aee_aed, debug_mtk_aee_prop);
# /proc/lk_env
[ALPS03825066] Mark file context to fix build fails Restore the policies accessing files labeled as proc_xxx or sysfs_xxx, but there are some exceptions for coredomain process, such as meta_tst,dump_state,kpoc_charger MTK-Commit-Id: 7953b5203bb3cac099c3326d330643b4cd73746d Change-Id: I4b16c09c352891783e837bea370c264966ca6d13 CR-Id: ALPS03825066 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:29:41 +08:00
allow aee_aed proc_lk_env:file rw_file_perms;
import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
2020-01-18 09:29:32 +08:00
[ALPS03841705] AEE porting on Android P about selinux [Detail] 1. add some rules 2. transfer aee_core_forwarder domain form kerenl to aee_core_forwarder MTK-Commit-Id: 7ad2c5df75565153ccec471f0eb2224c912515cd Change-Id: I9b576e3937d04b5848baeb156718d0469fa05a75 CR-Id: ALPS03841705 Feature: Android Exception Engine(AEE)
2020-01-18 09:48:59 +08:00
# Purpose: Allow aee_aed to read /proc/pid/exe
import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
2020-01-18 09:29:32 +08:00
allow aee_aed exec_type:file r_file_perms;
[ALPS03841705] AEE porting on Android P [Detail] 1. modify property according to P rule 2. add some selinux rules 3. relable /proc/slabinfo /proc/zraminfo MTK-Commit-Id: aa654138c8b48d223b614c81d2f39d7cd6eedd1f Change-Id: Ib47383553b0d320d3766780f35c397be60dc1339 CR-Id: ALPS03841705 Feature: Android Exception Engine(AEE)
2020-01-18 09:35:48 +08:00
[ALPS03841705] AEE porting on Android P about selinux [Detail] 1. add some rules 2. transfer aee_core_forwarder domain form kerenl to aee_core_forwarder MTK-Commit-Id: 7ad2c5df75565153ccec471f0eb2224c912515cd Change-Id: I9b576e3937d04b5848baeb156718d0469fa05a75 CR-Id: ALPS03841705 Feature: Android Exception Engine(AEE)
2020-01-18 09:48:59 +08:00
# Purpose: Allow aee_aed to read /proc/cpu/alignment
[ALPS03841705] AEE porting on Android P [Detail] 1. modify property according to P rule 2. add some selinux rules 3. relable /proc/slabinfo /proc/zraminfo MTK-Commit-Id: aa654138c8b48d223b614c81d2f39d7cd6eedd1f Change-Id: Ib47383553b0d320d3766780f35c397be60dc1339 CR-Id: ALPS03841705 Feature: Android Exception Engine(AEE)
2020-01-18 09:35:48 +08:00
allow aee_aed proc_cpu_alignment:file { write open };
[ALPS03825066] Fix boot fail [Detail] System processes have no permission to access vendor_default_prop [Solution] Add get vendor_default_prop rule for system processes MTK-Commit-Id: 412119fb578fc32e9f046c09a13817cf3c755515 Change-Id: I791997e6bb44c61b69d32c6da0cc80c6f2a9759e CR-Id: ALPS03825066 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:47:42 +08:00
[ALPS03841705] AEE porting on Android P about selinux [Detail] 1. add some rules 2. transfer aee_core_forwarder domain form kerenl to aee_core_forwarder MTK-Commit-Id: 7ad2c5df75565153ccec471f0eb2224c912515cd Change-Id: I9b576e3937d04b5848baeb156718d0469fa05a75 CR-Id: ALPS03841705 Feature: Android Exception Engine(AEE)
2020-01-18 09:48:59 +08:00
# Purpose: Allow aee_aed to access /sys/devices/virtual/timed_output/vibrator/enable
allow aee_aed sysfs_vibrator_setting:dir search;
allow aee_aed sysfs_vibrator_setting:file w_file_perms;
[ALPS03841705] AEE porting on Android P about selinux [Detail] 1. add some rules 2. temp solution for getting ro.*.mediatek.version.branch/ ro.*.mediatek.version.release property MTK-Commit-Id: 12c4d79a10293c4611233c985c29dca94f6e24ae Change-Id: Ice4d565664f95a456f985ed138f302fe7ac4dbff CR-Id: ALPS03841705 Feature: Android Exception Engine(AEE)
2020-01-18 09:50:43 +08:00
allow aee_aed sysfs_vibrator:dir search;
[ALPS03841705] AEE porting on Android P about selinux [Detail] 1. add some rules 2. transfer aee_core_forwarder domain form kerenl to aee_core_forwarder MTK-Commit-Id: 7ad2c5df75565153ccec471f0eb2224c912515cd Change-Id: I9b576e3937d04b5848baeb156718d0469fa05a75 CR-Id: ALPS03841705 Feature: Android Exception Engine(AEE)
2020-01-18 09:48:59 +08:00
# Purpose: Allow aee_aed to read /proc/kpageflags
allow aee_aed proc_kpageflags:file r_file_perms;
[ALPS03841705] AEE porting on Android P about selinux [Detail] 1. add some rules 2. temp solution for getting ro.*.mediatek.version.branch/ ro.*.mediatek.version.release property MTK-Commit-Id: 12c4d79a10293c4611233c985c29dca94f6e24ae Change-Id: Ice4d565664f95a456f985ed138f302fe7ac4dbff CR-Id: ALPS03841705 Feature: Android Exception Engine(AEE)
2020-01-18 09:50:43 +08:00
# temp solution
get_prop(aee_aed, vendor_default_prop)
Reference in New Issue Copy Permalink