NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04760982] audiohal: fix High risk SEPolicies of mtk_hal_audio

Browse Source 
[detail]
remove sysfs file permission,
only request the sysfs_ccci file

MTK-Commit-Id: 0649e6c55c648d65fa9c599d73bfa98e02e918fe

Change-Id: Idab0ac8e4aff9234887f70dc60fe51339d78cd2b
CR-Id: ALPS04760982
Feature: [Module]Audio HAL
This commit is contained in:
chien-wei hsu 2020-01-18 10:19:52 +08:00 committed by Chien-Wei Hsu
parent 9f9773fc1f
commit 6bc8ac8bdb
1 changed files with 1 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
non_plat/mtk_hal_audio.te
View File

@ -158,17 +158,13 @@ allow mtk_hal_audio mnt_user_file:lnk_file {read write};
# Operation : Migration # Operation : Migration
# Purpose: read/open sysfs node # Purpose: read/open sysfs node
allow mtk_hal_audio sysfs_ccci:file r_file_perms; allow mtk_hal_audio sysfs_ccci:file r_file_perms;
allow mtk_hal_audio sysfs_ccci:dir search;
# Date : WK16.18 # Date : WK16.18
# Operation : Migration # Operation : Migration
# Purpose: research root dir "/" # Purpose: research root dir "/"
allow mtk_hal_audio tmpfs:dir search; allow mtk_hal_audio tmpfs:dir search;
# Date : WK16.18
# Operation : Migration
# Purpose: access sysfs node
allow mtk_hal_audio sysfs:file { open read write };
allow mtk_hal_audio sysfs_ccci:dir search;
# Purpose: Dump debug info # Purpose: Dump debug info
allow mtk_hal_audio debugfs_binder:dir search; allow mtk_hal_audio debugfs_binder:dir search;
allow mtk_hal_audio kmsg_device:chr_file { open write }; allow mtk_hal_audio kmsg_device:chr_file { open write };