NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "[ALPS03901606] eMMC&UFS : Combo feature" into alps-trunk-p0.basic

Browse Source 
Change-Id: I4c2f71a7849a30d85ece28c9b145249f9db056c1
MTK-Commit-Id: 52337831adf6f4f1f3fe2ab268936646e789de8d
This commit is contained in:
Peter Wang 2020-01-18 09:52:29 +08:00 committed by Gerrit Code Review
commit 2c7dd5ac57
13 changed files with 24 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
non_plat/aee_aedv.te
View File

@ -414,7 +414,7 @@ allow aee_aedv proc_msdc_debug:file r_file_perms;
allow aee_aedv sysfs_vcore_debug:file r_file_perms; allow aee_aedv sysfs_vcore_debug:file r_file_perms;
# Purpose: Allow aee_aedv to read /sys/devices/virtual/BOOT/BOOT/boot/boot_mode # Purpose: Allow aee_aedv to read /sys/devices/virtual/BOOT/BOOT/boot/boot_mode
allow aee_aedv sysfs_boot:file r_file_perms; allow aee_aedv sysfs_boot_mode:file r_file_perms;
#Purpose: Allow aee_aedv to read/write /sys/kernel/debug/tracing/buffer_total_size_kb #Purpose: Allow aee_aedv to read/write /sys/kernel/debug/tracing/buffer_total_size_kb
userdebug_or_eng(` userdebug_or_eng(`

1
non_plat/ccci_fsd.te
View File

@ -40,6 +40,7 @@ allow ccci_fsd c2k_file:file create_file_perms;
allow ccci_fsd otp_part_block_device:blk_file rw_file_perms; allow ccci_fsd otp_part_block_device:blk_file rw_file_perms;
allow ccci_fsd otp_device:chr_file rw_file_perms; allow ccci_fsd otp_device:chr_file rw_file_perms;
allow ccci_fsd sysfs:file r_file_perms; allow ccci_fsd sysfs:file r_file_perms;
allow ccci_fsd sysfs_boot_type:file { read open };
#============= ccci_fsd MD block data============== #============= ccci_fsd MD block data==============
allow ccci_fsd block_device:dir search; allow ccci_fsd block_device:dir search;
allow ccci_fsd nvram_device:blk_file rw_file_perms; allow ccci_fsd nvram_device:blk_file rw_file_perms;

2
non_plat/cmddumper.te
View File

@ -25,5 +25,5 @@ allow cmddumper media_rw_data_file:dir { create_dir_perms };
allow cmddumper file_contexts_file:file { read getattr open }; allow cmddumper file_contexts_file:file { read getattr open };
# purpose: access /sys/devices/virtual/BOOT/BOOT/boot/boot_mode # purpose: access /sys/devices/virtual/BOOT/BOOT/boot/boot_mode
allow cmddumper sysfs_boot:file { read open }; allow cmddumper sysfs_boot_mode:file { read open };

2
non_plat/connsyslogger.te
View File

@ -68,7 +68,7 @@ allow connsyslogger storage_file:dir { create_dir_perms };
allow connsyslogger storage_file:file { create_file_perms }; allow connsyslogger storage_file:file { create_file_perms };
#permission for read boot mode #permission for read boot mode
allow connsyslogger sysfs_boot:file { read open }; allow connsyslogger sysfs_boot_mode:file { read open };
allow connsyslogger fw_log_wifi_device:chr_file {read write open ioctl}; allow connsyslogger fw_log_wifi_device:chr_file {read write open ioctl};
allow connsyslogger fw_log_bt_device:chr_file {read write open ioctl}; allow connsyslogger fw_log_bt_device:chr_file {read write open ioctl};

2
non_plat/emdlogger.te
View File

@ -57,7 +57,7 @@ allow emdlogger storage_file:file { create_file_perms };
#permission for read boot mode #permission for read boot mode
#avc: denied { open } path="/sys/devices/virtual/BOOT/BOOT/boot/boot_mode" dev="sysfs" #avc: denied { open } path="/sys/devices/virtual/BOOT/BOOT/boot/boot_mode" dev="sysfs"
allow emdlogger sysfs_boot:file { read open }; allow emdlogger sysfs_boot_mode:file { read open };
# Allow read to sys/kernel/ccci/* files # Allow read to sys/kernel/ccci/* files
allow emdlogger sysfs_ccci:dir search; allow emdlogger sysfs_ccci:dir search;

3
non_plat/factory.te
View File

@ -227,7 +227,8 @@ allow factory sysfs_ccci:file r_file_perms;
# avc: denied { read } for name="boot_mode" dev="sysfs" ino=117 # avc: denied { read } for name="boot_mode" dev="sysfs" ino=117
# scontext=u:r:factory:s0 tcontext=u:object_r:sysfs:s0 # scontext=u:r:factory:s0 tcontext=u:object_r:sysfs:s0
# tclass=file permissive=0 # tclass=file permissive=0
allow factory sysfs_boot:file rw_file_perms; allow factory sysfs_boot_mode:file { read open };
allow factory sysfs_boot_type:file { read open };
# Date: WK16.30 # Date: WK16.30
#Purpose: For gps test #Purpose: For gps test

5
non_plat/file.te
View File

@ -248,8 +248,9 @@ type mtk_powerhal_data_file, file_type, data_file_type;
type mddb_data_file, file_type, data_file_type; type mddb_data_file, file_type, data_file_type;
# Date : WK1814 # Date : WK1814
# Purpose : for factory to get boot mode # Purpose : for factory to get boot mode and type
type sysfs_boot, fs_type, sysfs_type; type sysfs_boot_mode, fs_type, sysfs_type;
type sysfs_boot_type, fs_type, sysfs_type;
# consys Log folder # consys Log folder
type consyslog_data_file, file_type, data_file_type; type consyslog_data_file, file_type, data_file_type;

3
non_plat/file_contexts
View File

@ -478,7 +478,8 @@
/sys/firmware/devicetree/base/chosen/atag\,devinfo u:object_r:sysfs_devinfo:s0 /sys/firmware/devicetree/base/chosen/atag\,devinfo u:object_r:sysfs_devinfo:s0
/sys/devices/virtual/thermal(/.*)? u:object_r:sysfs_therm:s0 /sys/devices/virtual/thermal(/.*)? u:object_r:sysfs_therm:s0
/sys/devices/virtual/switch/fps(/.*)? u:object_r:sysfs_fps:s0 /sys/devices/virtual/switch/fps(/.*)? u:object_r:sysfs_fps:s0
/sys/devices/virtual/BOOT/BOOT/boot/boot_mode(/.*)? u:object_r:sysfs_boot:s0 /sys/devices/virtual/BOOT/BOOT/boot/boot_mode(/.*)? u:object_r:sysfs_boot_mode:s0
/sys/devices/virtual/BOOT/BOOT/boot/boot_type(/.*)? u:object_r:sysfs_boot_type:s0
/sys/bus/platform/drivers/meta_com_type_info/meta_com_type_info(/.*)? u:object_r:sysfs_comport_type:s0 /sys/bus/platform/drivers/meta_com_type_info/meta_com_type_info(/.*)? u:object_r:sysfs_comport_type:s0
/sys/bus/platform/drivers/meta_uart_port_info/meta_uart_port_info(/.*)? u:object_r:sysfs_uart_info:s0 /sys/bus/platform/drivers/meta_uart_port_info/meta_uart_port_info(/.*)? u:object_r:sysfs_uart_info:s0
/sys/devices/platform/(charger|battery)/ADC_Charger_Voltage u:object_r:sysfs_vbus:s0 /sys/devices/platform/(charger|battery)/ADC_Charger_Voltage u:object_r:sysfs_vbus:s0

2
non_plat/mdlogger.te
View File

@ -56,4 +56,4 @@ allow emdlogger file_contexts_file:file { read getattr open};
#permission for read boot mode #permission for read boot mode
#avc: denied { open } path="/sys/devices/virtual/BOOT/BOOT/boot/boot_mode" dev="sysfs" #avc: denied { open } path="/sys/devices/virtual/BOOT/BOOT/boot/boot_mode" dev="sysfs"
allow mdlogger sysfs_boot:file { read open }; allow mdlogger sysfs_boot_mode:file { read open };

2
non_plat/mobile_log_d.te
View File

@ -1,5 +1,5 @@
# boot_mdoe file access # boot_mdoe file access
allow mobile_log_d sysfs_boot:file { open read }; allow mobile_log_d sysfs_boot_mode:file { open read };
#proc/ access #proc/ access
#allow mobile_log_d proc:file r_file_perms; #allow mobile_log_d proc:file r_file_perms;

3
prebuilts/api/26.0/plat_private/file.te
View File

@ -4,3 +4,6 @@
# For drmserver # For drmserver
type access_sys_file, fs_type, sysfs_type; type access_sys_file, fs_type, sysfs_type;
# For boot type
type sysfs_boot_type, fs_type, sysfs_type;

3
prebuilts/api/26.0/plat_private/file_contexts
View File

@ -39,3 +39,6 @@
# For drmserver # For drmserver
/sys/block/mmcblk0rpmb/size u:object_r:access_sys_file:s0 /sys/block/mmcblk0rpmb/size u:object_r:access_sys_file:s0
# For boot type
/sys/devices/virtual/BOOT/BOOT/boot/boot_type(/.*)? u:object_r:sysfs_boot_type:s0

3
prebuilts/api/26.0/plat_private/recovery.te
View File

@ -2,3 +2,6 @@
allow recovery mtd_device:dir search; allow recovery mtd_device:dir search;
allow recovery mtd_device:chr_file { read write open ioctl getattr }; allow recovery mtd_device:chr_file { read write open ioctl getattr };
allow recovery self:capability sys_resource; allow recovery self:capability sys_resource;
# For boot type
allow recovery sysfs_boot_type:file { read open };