NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04474673] allow vendor init write expdb

Browse Source 
[   34.641681] <0>.(7)[346:logd.auditd]type=1400
audit(1558666535.652:116): avc: denied { read write } for comm="init"
name="mmcblk0p4" dev="tmpfs" ino=14428 scontext=u:r:vendor_init:s0
tcontext=u:object_r:expdb_block_device:s0 tclass=blk_file permissive=0

allow vendor init write into expdb partition.

MTK-Commit-Id: f46025981c46c95f7cc42a3c1380cf71b686d1e6

Change-Id: I573ed127c93cd84d49042ae5671b19ca967dd2e1
CR-Id: ALPS04474673
Feature: Android Exception Engine(AEE)
This commit is contained in:
zhiyong.wang 2020-01-18 10:13:41 +08:00
parent c95ef58ba5
commit 0f9a4e559f
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
non_plat/vendor_init.te
View File

@ -63,3 +63,6 @@ set_prop(vendor_init, mtk_fullscreenswitch_prop)
# for kernel module verification support, allow vendor domain to search kernel keyring
allow vendor_init kernel:key search;
# Purpose: /dev/block/mmcblk0p10
allow vendor_init expdb_block_device:blk_file rw_file_perms;