NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS02333452] Android p selinux change

Browse Source 
[Detail]
Android has defined neverallow rules
to restrict direct access to system files.
We need to have a custom label for each policy.

[Solution]
Define custom label for drmserver

MTK-Commit-Id: c84c43b87a6ac2651a0562b8818bc66516e4a50b

Change-Id: Ide4fc49628508aee77e67f3213749210430153a3
CR-Id: ALPS02333452
Feature: OMA DRM V1.0
This commit is contained in:
mtk33297 2020-01-18 09:38:07 +08:00
parent af8b6473d2
commit 1cbaa678fe
3 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
plat_private/drmserver.te
View File

@ -3,4 +3,4 @@
# ======================
# =======drmserver======
#allow drmserver sysfs:file { read open };
allow drmserver access_sys_file:file { read open };

6
plat_private/file.te Executable file
View File

@ -0,0 +1,6 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# For drmserver
type access_sys_file, fs_type, sysfs_type;

2
plat_private/file_contexts
View File

@ -44,3 +44,5 @@
#MTK vibrator
/sys/devices/platform/vibrator@0/leds/vibrator(/.*)? u:object_r:sysfs_vibrator:s0
/sys/block/mmcblk0rpmb/size u:object_r:access_sys_file:s0