NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04763237] Modify permission forRIL

Browse Source 
Reduce the scope of permission for RIL to access proc node.

MTK-Commit-Id: 4f0402b23acbbcf90e195f4c0bfc3bd249c1489e

Change-Id: I442119bd6696a40aa1a49bec781cfb947869b995
CR-Id: ALPS04763237
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
This commit is contained in:
Youxiu Wang 2020-01-18 10:19:51 +08:00
parent f4b78200ab
commit 6f8abd5708
3 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
non_plat/file.te
View File

@ -389,3 +389,7 @@ type sysfs_sensor, fs_type, sysfs_type;
#MTEE trusty #MTEE trusty
type mtee_trusty_file, fs_type, sysfs_type; type mtee_trusty_file, fs_type, sysfs_type;
# Date : 2019/08/29
# Purpose: Allow rild access proc/aed/reboot-reason
type proc_aed_reboot_reason, fs_type, proc_type;

4
non_plat/genfs_contexts
View File

@ -220,3 +220,7 @@ genfscon sysfs /devices/virtual/sensor u:object_r:sysfs_sensor:s0
# MTEE trusty # MTEE trusty
genfscon sysfs /devices/platform/trusty u:object_r:mtee_trusty_file:s0 genfscon sysfs /devices/platform/trusty u:object_r:mtee_trusty_file:s0
# Date : 2019/08/29
# Purpose: allow rild to access /proc/aed/reboot-reason
genfscon proc /aed/reboot-reason u:object_r:proc_aed_reboot_reason:s0

5
non_plat/rild.te
View File

@ -43,7 +43,6 @@ allow rild bluetooth_efs_file:dir r_dir_perms;
# Violate Android P rule # Violate Android P rule
allow rild sdcardfs:dir r_dir_perms; allow rild sdcardfs:dir r_dir_perms;
#allow rild system_file:file x_file_perms; #allow rild system_file:file x_file_perms;
allow rild proc:file rw_file_perms;
allow rild proc_net:file w_file_perms; allow rild proc_net:file w_file_perms;
# Allow rild to create and use netlink sockets. # Allow rild to create and use netlink sockets.
@ -155,3 +154,7 @@ allow rild proc_cmdline:file r_file_perms;
# Operation: AP wifi path # Operation: AP wifi path
# Purpose: Allow packet can be filtered by RILD process # Purpose: Allow packet can be filtered by RILD process
allow rild self:netlink_netfilter_socket { create_socket_perms_no_ioctl }; allow rild self:netlink_netfilter_socket { create_socket_perms_no_ioctl };
# Date : 2019/08/29
# Purpose: Allow rild to access proc/aed/reboot-reason
allow rild proc_aed_reboot_reason:file rw_file_perms;