NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
android_device_mediatek_sep.../non_plat/vendor_init.te

33 lines
1.3 KiB
Plaintext
Raw Normal View History

[ALPS03881723] vendor_init: Fix bootup denial [Detail] vendor_init is new introduced in Android P, and related policies have not been created yet. [Solution] Add policies for vendor_init MTK-Commit-Id: 00dc11bf94cbb7909ef58482d7726ebe8b954782 Change-Id: Ic2286e8e3e67b4005c7e2df18d217275f069f208 CR-Id: ALPS03881723 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:47:51 +08:00
allow vendor_init exported3_system_prop:property_service set;
allow vendor_init dalvik_prop:property_service set;
allow vendor_init ffs_prop:property_service set;
allow vendor_init mediatek_prop:property_service set;
allow vendor_init mtk_md_version_prop:property_service set;
allow vendor_init mtk_volte_prop:property_service set;
allow vendor_init usp_prop:property_service set;
allow vendor_init vendor_radio_prop:property_service set;
[ALPS03878966] Declare label for mtk_ril_mode [Detail] 1. Add label: mtk_ril_mode_prop 2. Add ro.vendor.mtk_ril_mode into the label MTK-Commit-Id: 68167f299e05a9fc8a11f4d7579c1a62fe2e7575 Change-Id: I3df9fb88b7871506272ec7f020ce2d5ecdf85272 CR-Id: ALPS03878966 Feature: WiFi Calling Service
2020-01-18 09:56:30 +08:00
allow vendor_init mtk_ril_mode_prop:property_service set;
[ALPS03934986] Fix Selinux issue [Detail] Command chown system system /mnt/vendor/nvcfg action=post-fs-data (/vendor/etc/init/hw/init.mt6739.rc:138) took 1ms and failed: lchown() failed: Permission denied [Solution] Add unlabeled permission for vendor_init MTK-Commit-Id: 511397f101d5d63593199c212888e674e661199d Change-Id: Ia22badf945b52f76be3176f3081ada35aaada17b CR-Id: ALPS03934986 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:51:11 +08:00
allow vendor_init wmt_prop:property_service set;
[ALPS03881723] vendor_init: Fix bootup denial [Detail] vendor_init is new introduced in Android P, and related policies have not been created yet. [Solution] Add policies for vendor_init MTK-Commit-Id: 00dc11bf94cbb7909ef58482d7726ebe8b954782 Change-Id: Ic2286e8e3e67b4005c7e2df18d217275f069f208 CR-Id: ALPS03881723 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:47:51 +08:00
allow vendor_init proc:file write;
allow vendor_init proc_bootprof:file write;
allow vendor_init rootfs:dir { write add_name setattr };
allow vendor_init self:capability sys_module;
allow vendor_init tmpfs:dir { write create add_name };
[ALPS03934986] Fix Selinux issue [Detail] Command chown system system /mnt/vendor/nvcfg action=post-fs-data (/vendor/etc/init/hw/init.mt6739.rc:138) took 1ms and failed: lchown() failed: Permission denied [Solution] Add unlabeled permission for vendor_init MTK-Commit-Id: 511397f101d5d63593199c212888e674e661199d Change-Id: Ia22badf945b52f76be3176f3081ada35aaada17b CR-Id: ALPS03934986 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:51:11 +08:00
allow vendor_init unlabeled:dir { relabelfrom getattr setattr search };
[ALPS03881723] vendor_init: Fix bootup denial [Detail] vendor_init is new introduced in Android P, and related policies have not been created yet. [Solution] Add policies for vendor_init MTK-Commit-Id: 00dc11bf94cbb7909ef58482d7726ebe8b954782 Change-Id: Ic2286e8e3e67b4005c7e2df18d217275f069f208 CR-Id: ALPS03881723 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:47:51 +08:00
allow vendor_init vendor_file:system module_load;
[ALPS03841705] aee cant red screen on enforcing mode [Detail] aee cant red screen on enforcing mode MTK-Commit-Id: baa0c22ec13f572616eb8d5bcfc35e1dfadf4f02 Change-Id: Ib87249d85e81d60dba28e546902956be43c7d88c CR-Id: ALPS03841705 Feature: Android Exception Engine(AEE)
2020-01-18 09:50:25 +08:00
allow vendor_init kmsg_device:chr_file unlink;
[ALPS03943443] Modem Log start USB logging fail Fix SELinux errors: 1. Set vendor property 2. Set USB property [Solution] Add permission MTK-Commit-Id: f9bea7ca32b8ca70e6f015d786753a43491810aa Change-Id: I3e7cfc80eb34c3430a059b57afa1474ee49e75b1 CR-Id: ALPS03943443 Feature: Modem Log Tool
2020-01-18 09:55:57 +08:00
set_prop(vendor_init, persist_mtk_aee_prop)
[ALPS03841705] relable the ro.* property of AEE [Detail] relable the ro.* property of AEE MTK-Commit-Id: d3a00d0323f1ea56c68c75a3c07e5db649ccf328 Change-Id: Id4038cd4b01622bd955d4845eae9493693ef33b6 CR-Id: ALPS03841705 Feature: Android Exception Engine(AEE)
2020-01-18 09:51:24 +08:00
set_prop(vendor_init, ro_mtk_aee_prop)
[ALPS03943443] Modem Log start USB logging fail Fix SELinux errors: 1. Set vendor property 2. Set USB property [Solution] Add permission MTK-Commit-Id: f9bea7ca32b8ca70e6f015d786753a43491810aa Change-Id: I3e7cfc80eb34c3430a059b57afa1474ee49e75b1 CR-Id: ALPS03943443 Feature: Modem Log Tool
2020-01-18 09:55:57 +08:00
set_prop(vendor_init, vendor_usb_prop)
[ALPS03929399] Rename CT VoLTE system property [Detail] Rename CT VoLTE system property and allow other module to access persist.vendor.mtk_ct_volte_support. MTK-Commit-Id: bc5a52b6998d941aa12c7532f095d1a8c67d663f Change-Id: I33881fd6684dc76e148ac4917e5c146f949e24f7 CR-Id: ALPS03929399 Feature: [China Telecom]VoLTE Customization
2020-01-18 09:57:56 +08:00
set_prop(vendor_init, mtk_ct_volte_prop)
[ALPS03809072] Set rat config property permission [Detail] Set permission for property "ro.vendor.mtk_protocol1_rat_config". MTK-Commit-Id: 6bf36e9b4dc41769abb6d54a204877df82aa3804 Change-Id: Ie0b31f15e65381d4094bdf2095f8047db1be21fd CR-Id: ALPS03809072 Feature: Telephony feature switch dynamically
2020-01-18 09:58:25 +08:00
set_prop(vendor_init, mtk_gps_support_prop)
set_prop(vendor_init, mtk_rat_config_prop)
[ALPS03951976] PQ:Add PQ Property Permission Add pq/aal property label & permission. MTK-Commit-Id: 7ff05d937adde3f2d3c59029e140a640f23212b9 Change-Id: Ib6d9763bb00df0e40c6d77306d5faece7b5d1a00 CR-Id:ALPS03951976 Feature:MiraVision
2020-01-18 09:58:47 +08:00
set_prop(vendor_init, mtk_aal_ro_prop)
set_prop(vendor_init, mtk_pq_ro_prop)
[ALPS03934986] Add mtk_default_prop 1. We have too many config properties set by PRODUCT_PROPERTY_OVERRIDES, and these properties usually are not sensitive and allow all processes to read. 2. Since Android P, properties should follow naming rule to add "vendor", and then this will cause properties to be labeled as vendor_default_prop. By default, coredomain is not granted to read vendor_default_prop. Actually these properties are read widely from system/vendor processes. 3. So we introduce "mtk_default_prop" type that grant read access to all processes, including system and vendor. MTK-Commit-Id: 18077a2cb14b7b1ddadb7000e8abb565f0fd49e3 Change-Id: Ia378db3dbb9d0bf388139be3419e013228c79d6e CR-Id: ALPS03934986 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:59:13 +08:00
set_prop(vendor_init, mtk_default_prop)
[ALPS03810368] Sepolicy: define rule for ro.vendor.mtk_emmc_support [Detail] Define rule for ro.vendor.mtk_emmc_support MTK-Commit-Id: ecb6dcb6823b088fea26b80aa12d2f6bfbc507bf Change-Id: If37ce094f1bb06365061bde36f225aa06fc6f424 CR-Id: ALPS03810368 Feature: eMMC Boot Up
2020-01-18 10:00:47 +08:00
set_prop(vendor_init, mtk_emmc_support_prop)
Reference in New Issue Copy Permalink