[ALPS03908242] Add SEPolicy

[Detail]
System properties like init.svc.vendor.* cannot be dumped
in mobilelog. It is because moblelogd doesnt have permission to
access them. The status of VoLTE-stack cannot be shown in
mobilelog.

[Solution]
Add get permission to access those system properties

MTK-Commit-Id: 73a911ef7934cdb4640809343f64c9815c43f1be

Change-Id: I6c11e5a397826c45ca83cb19ce6cb114aee59f53
CR-Id:ALPS03908242
Feature:VoLTE (Voice over LTE)
This commit is contained in:
Cheng-H Chen 2020-01-18 10:02:51 +08:00
parent 590d94440a
commit 5925ad4321

View File

@ -56,3 +56,7 @@ allow mobile_log_d port:tcp_socket { name_connect name_bind };
allow mobile_log_d mobile_log_d:tcp_socket { create connect setopt bind }; allow mobile_log_d mobile_log_d:tcp_socket { create connect setopt bind };
allow mobile_log_d mobile_log_d:tcp_socket { bind setopt listen accept read write }; allow mobile_log_d mobile_log_d:tcp_socket { bind setopt listen accept read write };
allow mobile_log_d node:tcp_socket node_bind; allow mobile_log_d node:tcp_socket node_bind;
# purpose: allow mobile_log_d to read system property init.svc.vendor.
get_prop(mobile_log_d, vendor_default_prop)