From 674a078700a96975715b90040aec0ece1fc078f5 Mon Sep 17 00:00:00 2001 From: Guoyi Qu Date: Sat, 18 Jan 2020 10:08:13 +0800 Subject: [PATCH] [ALPS04293786] grant map permission SELinux: Add map permission MTK-Commit-Id: a22cef3bef32ef81209eadc40cc235c6f14fdd20 Change-Id: I6c2ef8491bead430e1dd3c0a784dec8faccefb36 CR-Id: ALPS04293786 Feature: Connsys Log Tool (cherry picked from commit 65870f81b629bc35cdfba2563dadf04ac54822de) --- non_plat/connsyslogger.te | 5 ++++- non_plat/emdlogger.te | 5 ++++- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/non_plat/connsyslogger.te b/non_plat/connsyslogger.te index 36746f5..0a69fa9 100755 --- a/non_plat/connsyslogger.te +++ b/non_plat/connsyslogger.te @@ -31,7 +31,7 @@ allow connsyslogger init:unix_stream_socket connectto; allow connsyslogger tmpfs:lnk_file { create_file_perms }; # purpose: avc: denied { read } for name="plat_file_contexts" -allow connsyslogger file_contexts_file:file { read getattr open }; +allow connsyslogger file_contexts_file:file { read getattr open map}; #logger SD logging in factory mode allow connsyslogger vfat:dir create_dir_perms; @@ -66,4 +66,7 @@ allow connsyslogger media_rw_data_file:dir { create_dir_perms }; set_prop(connsyslogger, vendor_connsysfw_prop) +allow connsyslogger vendor_configs_file:file map; + + diff --git a/non_plat/emdlogger.te b/non_plat/emdlogger.te index b7f7dbb..c24a3f8 100644 --- a/non_plat/emdlogger.te +++ b/non_plat/emdlogger.te @@ -91,7 +91,7 @@ allow emdlogger proc_lk_env:file { read write ioctl open }; file_type_auto_trans(emdlogger, system_data_file, mdlog_data_file) ## purpose: avc: denied { read } for name="plat_file_contexts" -allow emdlogger file_contexts_file:file { read getattr open }; +allow emdlogger file_contexts_file:file { read getattr open map}; allow emdlogger block_device:dir search; allow emdlogger md_block_device:blk_file { read open }; @@ -116,3 +116,6 @@ get_prop(emdlogger, vendor_usb_prop) set_prop(emdlogger, persist_mdlog_prop) set_prop(emdlogger, vendor_mdl_pulllog_prop) set_prop(emdlogger, exported_system_radio_prop) + +allow emdlogger vendor_configs_file:file map; +allow emdlogger vendor_default_prop:file map;