android_device_mediatek_sep.../non_plat/mediaextractor.te

# ==============================================
# MTK Policy Rule
# ==============================================

# Date : WK16.33
# Purpose: Allow to access ged for gralloc_extra functions
allow mediaextractor proc_ged:file {open read write ioctl getattr};

# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(mediaextractor, vendor_default_prop)
import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee 2020-01-18 09:29:32 +08:00			`# ==============================================`
			`# MTK Policy Rule`
			`# ==============================================`

			`# Date : WK16.33`
			`# Purpose: Allow to access ged for gralloc_extra functions`
[ALPS03825066] Mark file context to fix build fails Restore the policies accessing files labeled as proc_xxx or sysfs_xxx, but there are some exceptions for coredomain process, such as meta_tst,dump_state,kpoc_charger MTK-Commit-Id: 7953b5203bb3cac099c3326d330643b4cd73746d Change-Id: I4b16c09c352891783e837bea370c264966ca6d13 CR-Id: ALPS03825066 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK 2020-01-18 09:29:41 +08:00			`allow mediaextractor proc_ged:file {open read write ioctl getattr};`
[ALPS03825066] Fix boot fail [Detail] System processes have no permission to access vendor_default_prop [Solution] Add get vendor_default_prop rule for system processes MTK-Commit-Id: ad4fb4d8ae4fb38767c16b82ce9d8351f5f59702 Change-Id: I31cf13db6b50a3cff193aa0a34bc1130e5b18942 CR-Id: ALPS03825066 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK 2020-01-18 09:48:37 +08:00
			`# Date : WK18.20`
			`# Operation : Migration`
			`# Purpose : no permission for vendor_default_prop`
			`get_prop(mediaextractor, vendor_default_prop)`