From 222d04459c730745977d6ad4eb127f06f5fb8219 Mon Sep 17 00:00:00 2001 From: "xiao.liu" Date: Sat, 18 Jan 2020 10:21:33 +0800 Subject: [PATCH] [ALPS04840835] Remove all vendor sepolicy for fastbootd [Solution] 1. remove sepolicy for native partition erase permission 2. remove AB partition sepolicy, leave it to Google solution MTK-Commit-Id: 0476e00269accaf247550928cc72c010f99787c1 Change-Id: I67ab4363307a69b5a94a0242c12750bc94670344 CR-Id: ALPS04840835 Feature: [Android Default] Fastboot --- non_plat/fastbootd.te | 38 +++++++++++++++++++------------------- 1 file changed, 19 insertions(+), 19 deletions(-) diff --git a/non_plat/fastbootd.te b/non_plat/fastbootd.te index cb6708d..9e273ab 100644 --- a/non_plat/fastbootd.te +++ b/non_plat/fastbootd.te @@ -1,25 +1,25 @@ # fastbootd (used in recovery init.rc for /sbin/fastbootd) -allow fastbootd { - bootdevice_block_device - cache_block_device - logo_block_device - para_block_device - }:blk_file { rw_file_perms }; +#allow fastbootd { +# bootdevice_block_device +# cache_block_device +# logo_block_device +# para_block_device +# }:blk_file { rw_file_perms }; -allow fastbootd { - sysfs_boot_type -}:file { rw_file_perms }; +#allow fastbootd { +# sysfs_boot_type +#}:file { rw_file_perms }; -allowxperm fastbootd { - bootdevice_block_device - cache_block_device - logo_block_device - para_block_device - }:blk_file ioctl { - BLKSECDISCARD - BLKDISCARD - MMC_IOCTLCMD - }; +#allowxperm fastbootd { +# bootdevice_block_device +# cache_block_device +# logo_block_device +# para_block_device +# }:blk_file ioctl { +# BLKSECDISCARD +# BLKDISCARD +# MMC_IOCTLCMD +# };