NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "[ALPS03841705] AEE porting on Android P about selinux" into alps-trunk-p0.basic

Browse Source 
Change-Id: I5f57fbeca5c38a70e55a6a8d1d6e5e0cd51e9d98
MTK-Commit-Id: ccfbd36043a9be458e28c37d69ec2ce8ffaf5937
This commit is contained in:
Larry Liang 2020-01-18 09:52:49 +08:00 committed by Gerrit Code Review
commit 414d985a6b
2 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
non_plat/aee_aedv.te
View File

@ -357,8 +357,8 @@ allow aee_aedv sysfs_lowmemorykiller:file r_file_perms;
allow aee_aedv sysfs_scp:dir r_dir_perms;
allow aee_aedv sysfs_scp:file r_file_perms;
# Purpose: allow aee_aedv self to fsetid/sys_nice/chown/fowner
allow aee_aedv self:capability { fsetid sys_nice chown fowner };
# Purpose: allow aee_aedv self to fsetid/sys_nice/chown/fowner/kill
allow aee_aedv self:capability { fsetid sys_nice chown fowner kill };
# Purpose: allow aee_aedv to read /proc/buddyinfo
allow aee_aedv proc_buddyinfo:file r_file_perms;

7
plat_private/aee_aed.te
View File

@ -138,8 +138,8 @@ allow aee_aed crash_dump:file r_file_perms;
# Purpose : allow aee_aed to read /proc/version
allow aee_aed proc_version:file { read open };
# Purpose : allow aee_aed self to sys_nice/chown
allow aee_aed self:capability { sys_nice chown fowner};
# Purpose : allow aee_aed self to sys_nice/chown/kill
allow aee_aed self:capability { sys_nice chown fowner kill };
# Purpose: Allow aee_aed to write /sys/kernel/debug/tracing/snapshot
userdebug_or_eng(`allow aee_aed debugfs_tracing_debug:file { write open };')
@ -148,3 +148,6 @@ userdebug_or_eng(`allow aee_aed debugfs_tracing_debug:file { write open };')
userdebug_or_eng(`
allow aee_aed self:capability { sys_ptrace dac_override dac_read_search };
')
# Purpose: Allow aee_aed to read/write /sys/kernel/debug/tracing/tracing_on
userdebug_or_eng(` allow aee_aed debugfs_tracing:file { r_file_perms write };')