NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04688289] sepolicy: Add sepolicy rule for mke2fs

Browse Source 
Add sepolicy rule for mke2fs

MTK-Commit-Id: 979d9a74c16df6bac1dc47f7d40f0f6cb153c864

Change-Id: I774a962e4df4608921c8e29bec5019fcedfdfbd9
CR-Id: ALPS04688289
Feature: eMMC Boot Up
This commit is contained in:
Light Hsieh 2020-01-18 10:18:50 +08:00
parent 4f38a2249a
commit 63145bc394
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
non_plat/e2fs.te
View File

@ -19,13 +19,16 @@ allow e2fs devpts:chr_file {read write};
allow e2fs cache_block_device:blk_file rw_file_perms; allow e2fs cache_block_device:blk_file rw_file_perms;
allow e2fs userdata_block_device:blk_file rw_file_perms; allow e2fs userdata_block_device:blk_file rw_file_perms;
# Date : WK19.11
# Operation: Q migration
# Purpose : Allow mke2fs to use ioctl/ioctlcmd
allowxperm e2fs protect1_block_device:blk_file ioctl BLKPBSZGET;
allowxperm e2fs protect2_block_device:blk_file ioctl BLKPBSZGET;
# Date : WK19.23 # Date : WK19.23
# Operation: Q migration # Operation: Q migration
# Purpose : Allow format /metadata for UDC # Purpose : Allow format /metadata for UDC
allow e2fs metadata_block_device:blk_file rw_file_perms; allow e2fs metadata_block_device:blk_file rw_file_perms;
# Date : WK19.34
# Operation: Q migration
# Purpose : Allow mke2fs to use ioctl/ioctlcmd
allowxperm e2fs protect1_block_device:blk_file ioctl { BLKPBSZGET BLKROGET BLKDISCARD BLKDISCARDZEROES BLKSECDISCARD };
allowxperm e2fs protect2_block_device:blk_file ioctl { BLKPBSZGET BLKROGET BLKDISCARD BLKDISCARDZEROES BLKSECDISCARD };
allowxperm e2fs nvdata_device:blk_file ioctl { BLKPBSZGET BLKROGET BLKDISCARD BLKDISCARDZEROES BLKSECDISCARD };
allowxperm e2fs nvcfg_block_device:blk_file ioctl { BLKPBSZGET BLKROGET BLKDISCARD BLKDISCARDZEROES BLKSECDISCARD };
allowxperm e2fs persist_block_device:blk_file ioctl { BLKPBSZGET BLKROGET BLKDISCARD BLKDISCARDZEROES BLKSECDISCARD };