[ALPS03861528] modify sepolicy for boot mode

[Solution]
sysfs is neverallow, so use sysfs_boot instead

MTK-Commit-Id: 8a48cfbc0a1df06330b9699da2f87243dd8155fe

Change-Id: I67a2dc04dfa5d863ceb8104695dec5d0dbc62630
CR-Id: ALPS03861528
Feature: Factory Mode
This commit is contained in:
Chunlan Wang 2020-01-18 09:30:46 +08:00
parent 5aa62a3b04
commit 06fbbbdb00
3 changed files with 6 additions and 1 deletions

View File

@ -227,7 +227,7 @@ allow factory sysfs_ccci:file r_file_perms;
# avc: denied { read } for name="boot_mode" dev="sysfs" ino=117 # avc: denied { read } for name="boot_mode" dev="sysfs" ino=117
# scontext=u:r:factory:s0 tcontext=u:object_r:sysfs:s0 # scontext=u:r:factory:s0 tcontext=u:object_r:sysfs:s0
# tclass=file permissive=0 # tclass=file permissive=0
#allow factory sysfs:file rw_file_perms; allow factory sysfs_boot:file rw_file_perms;
# Date: WK16.30 # Date: WK16.30
#Purpose: For gps test #Purpose: For gps test

View File

@ -233,3 +233,7 @@ type mtk_powerhal_data_file, file_type, data_file_type;
# Date : WK1743 # Date : WK1743
# Purpose : for meta_tst copy MD DB from MD image # Purpose : for meta_tst copy MD DB from MD image
type mddb_data_file, file_type, data_file_type; type mddb_data_file, file_type, data_file_type;
# Date : WK1814
# Purpose : for factory to get boot mode
type sysfs_boot, fs_type, sysfs_type;

View File

@ -473,6 +473,7 @@
/sys/devices/virtual/thermal(/.*)? u:object_r:sysfs_therm:s0 /sys/devices/virtual/thermal(/.*)? u:object_r:sysfs_therm:s0
/sys/devices/platform/battery/power_supply(/.*)? u:object_r:sysfs_power_supply:s0 /sys/devices/platform/battery/power_supply(/.*)? u:object_r:sysfs_power_supply:s0
/sys/devices/virtual/switch/fps(/.*)? u:object_r:sysfs_fps:s0 /sys/devices/virtual/switch/fps(/.*)? u:object_r:sysfs_fps:s0
/sys/class/BOOT/BOOT/boot/boot_mode(/.*)? u:object_r:sysfs_boot:s0
############################# #############################
# debugfs files # debugfs files