NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04752203] Add vendor permission for fastbootd sepolicy enable

Browse Source 
Google patch system/sepolicy/private/domain.te
Vendor sepolicy device/mediatek/sepolicy/basic/non_plat/fastbootd.te

MTK-Commit-Id: c793f3c90651b1fd483621e5795e41cf91cdf63e

Change-Id: I998679ac71c6018fc5f0305226bd73f91fd3f27e
CR-Id: ALPS04752203
Feature: [Android Default] Fastboot
This commit is contained in:
mtk80905 2020-01-18 10:21:55 +08:00 committed by Xiao.Liu
parent 812b6fe928
commit 4312a6125a
1 changed files with 21 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
non_plat/fastbootd.te
View File

@ -1,25 +1,28 @@
# fastbootd (used in recovery init.rc for /sbin/fastbootd)
#allow fastbootd {
# bootdevice_block_device
allow fastbootd {
bootdevice_block_device
# cache_block_device
# logo_block_device
para_block_device
}:blk_file { rw_file_perms };
allow fastbootd {
sysfs_boot_type
}:file { rw_file_perms };
allow fastbootd self:process setfscreate;
allow fastbootd self:capability sys_rawio;
allowxperm fastbootd {
bootdevice_block_device
# cache_block_device
# logo_block_device
# para_block_device
# }:blk_file { rw_file_perms };
#allow fastbootd {
# sysfs_boot_type
#}:file { rw_file_perms };
#allowxperm fastbootd {
# bootdevice_block_device
# cache_block_device
# logo_block_device
# para_block_device
# }:blk_file ioctl {
# BLKSECDISCARD
# BLKDISCARD
# MMC_IOCTLCMD
# };
}:blk_file ioctl {
BLKSECDISCARD
BLKDISCARD
MMC_IOCTLCMD
};