NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03943904] Act storagemanagerd as vold context

Browse Source 
[Detail]
In order to meet selinux limitation, storagemanagerd act as
vold context to mount storages

[Solution]
Add the following line in file_contexts.
/system/bin/storagemanagerd u:object_r:vold_exec:s0

MTK-Commit-Id: 0b309fd0afc84f3da0ea91a324dca6f824366537

Change-Id: I68e568b8e7d37d218ae88e82cdd509c32abaea66
CR-Id: ALPS03943904
Feature: Mobile Log Tool
This commit is contained in:
Denis Hsu 2020-01-18 09:57:15 +08:00
parent ad7720ff99
commit 0b03f73f0c
2 changed files with 3 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
plat_private/file_contexts
View File

@ -34,7 +34,7 @@
# storagemanager daemon
# it is used to mount all storages in meta/factory mode
/system/bin/storagemanagerd u:object_r:storagemanagerd_exec:s0
/system/bin/storagemanagerd u:object_r:vold_exec:s0
#MTK Bootanim
/system/bin/mtkbootanimation u:object_r:mtkbootanimation_exec:s0

23
plat_private/storagemanagerd.te
View File

@ -4,28 +4,9 @@
# ==============================================
# Type Declaration
# ==============================================
type storagemanagerd, domain;
type storagemanagerd_exec, exec_type, file_type;
typeattribute storagemanagerd coredomain;
# Act as 'vold' context to mount storages
# ==============================================
# MTK Policy Rule
# ==============================================
init_daemon_domain(storagemanagerd)
#unix_socket_connect(storagemanagerd, vold, vold)
# storagemanagerd sends information back to dumpstate when "adb bugreport" is used
allow storagemanagerd dumpstate:fd use;
allow storagemanagerd dumpstate:unix_stream_socket { read write getattr };
# storagemanagerd information is written to shell owned bugreport files
allow storagemanagerd shell_data_file:file { write getattr };
# Why?
allow storagemanagerd dumpstate:unix_dgram_socket { read write };
# storagemanagerd can be invoked with logwrapper, so let it write to pty
allow storagemanagerd devpts:chr_file rw_file_perms;