NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04754649] gz: add mtee trusty selinux perms

Browse Source 
fix sysfs permission for dumpstate under selinux.

MTK-Commit-Id: bca4ec3babf362b7f9d21b7c1ea8290f55d8d74c

Change-Id: I26cfbb4e959f0dbd89d46d6088284f36e6450c42
CR-Id: ALPS04754649
Feature: GenieZone
Signed-off-by: Nixy Hsu <nixy.hsu@mediatek.com>
This commit is contained in:
Nixy Hsu 2020-01-18 10:19:30 +08:00
parent 725c0b46e1
commit 2f89f8a47a
3 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
non_plat/dumpstate.te
View File

@ -174,3 +174,6 @@ allow dumpstate sysfs_adsp:file r_file_perms;
#Purpose: Allow dumpstate to read /sys/kernel/debug/smi_mon #Purpose: Allow dumpstate to read /sys/kernel/debug/smi_mon
allow dumpstate debugfs_smi_mon:file r_file_perms; allow dumpstate debugfs_smi_mon:file r_file_perms;
# MTEE Trusty
allow dumpstate mtee_trusty_file:file rw_file_perms;

3
non_plat/file.te
View File

@ -385,3 +385,6 @@ type vcodec_file, file_type, data_file_type;
# Date : 2019/08/24 # Date : 2019/08/24
type sysfs_sensor, fs_type, sysfs_type; type sysfs_sensor, fs_type, sysfs_type;
#MTEE trusty
type mtee_trusty_file, fs_type, sysfs_type;

5
non_plat/genfs_contexts
View File

@ -216,4 +216,7 @@ genfscon fuseblk / u:object_r:fuseblk:s0
# 2019/08/24 # 2019/08/24
genfscon sysfs /class/sensor u:object_r:sysfs_sensor:s0 genfscon sysfs /class/sensor u:object_r:sysfs_sensor:s0
genfscon sysfs /devices/virtual/sensor u:object_r:sysfs_sensor:s0 genfscon sysfs /devices/virtual/sensor u:object_r:sysfs_sensor:s0
# MTEE trusty
genfscon sysfs /devices/platform/trusty u:object_r:mtee_trusty_file:s0