NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "[ALPS03909621] Move Meta_tst" into alps-trunk-p0.basic

Browse Source 
Change-Id: Ibfa3d0a31255ba9b169240a03a76da62745bbfe9
MTK-Commit-Id: 76130225cb40ea0864147ec339a75163409f8c79
This commit is contained in:
Gang Wei 2020-01-18 09:53:01 +08:00 committed by Gerrit Code Review
commit 7329e46829
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
non_plat/meta_tst.te
View File

@ -53,7 +53,6 @@ allow meta_tst cache_block_device:blk_file rw_file_perms;
# Date: WK16.12 # Date: WK16.12
# Operation : Migration # Operation : Migration
# Purpose : for meta mode nvram # Purpose : for meta mode nvram
typeattribute meta_tst data_between_core_and_vendor_violators;
allow meta_tst nvram_data_file:dir create_dir_perms; allow meta_tst nvram_data_file:dir create_dir_perms;
allow meta_tst nvram_data_file:file create_file_perms; allow meta_tst nvram_data_file:file create_file_perms;
allow meta_tst nvram_data_file:lnk_file r_file_perms; allow meta_tst nvram_data_file:lnk_file r_file_perms;
@ -283,11 +282,11 @@ allow meta_tst system_data_file:lnk_file read;
allow meta_tst st21nfc_device:chr_file { open read write ioctl }; allow meta_tst st21nfc_device:chr_file { open read write ioctl };
allow meta_tst factory_data_file:sock_file { write unlink }; allow meta_tst factory_data_file:sock_file { write unlink };
allow meta_tst nfc_socket:dir search; allow meta_tst nfc_socket:dir search;
#allow meta_tst vendor_file:file { getattr execute execute_no_trans read open }; allow meta_tst vendor_file:file { getattr execute execute_no_trans read open };
set_prop(meta_tst,hwservicemanager_prop); set_prop(meta_tst,hwservicemanager_prop);
hwbinder_use(meta_tst); hwbinder_use(meta_tst);
hal_client_domain(meta_tst, hal_nfc); hal_client_domain(meta_tst, hal_nfc);
#allow meta_tst debugfs_tracing:file { open write }; allow meta_tst debugfs_tracing:file { open write };
# Date: W17.29 # Date: W17.29
# Purpose : Allow meta_tst to call vendor.mediatek.hardware.keymaster_attestation@1.0-service. # Purpose : Allow meta_tst to call vendor.mediatek.hardware.keymaster_attestation@1.0-service.
@ -297,7 +296,7 @@ hal_client_domain(meta_tst, mtk_hal_keyattestation)
# Operation : Android O migration # Operation : Android O migration
# Purpose : add sepolicy for accessing sysfs_leds # Purpose : add sepolicy for accessing sysfs_leds
allow meta_tst sysfs_leds:lnk_file read; allow meta_tst sysfs_leds:lnk_file read;
#allow meta_tst sysfs_leds:file rw_file_perms; allow meta_tst sysfs_leds:file rw_file_perms;
allow meta_tst sysfs_leds:dir r_dir_perms; allow meta_tst sysfs_leds:dir r_dir_perms;
# Date: WK17.43 # Date: WK17.43
@ -334,14 +333,14 @@ binder_call(meta_tst, mtk_hal_audio)
allow meta_tst mtk_hal_audio:binder call; allow meta_tst mtk_hal_audio:binder call;
allow meta_tst hal_audio_hwservice:hwservice_manager find; allow meta_tst hal_audio_hwservice:hwservice_manager find;
allow meta_tst mtk_audiohal_data_file:dir {read search open}; allow meta_tst mtk_audiohal_data_file:dir {read search open};
#allow meta_tst proc:file {read open}; allow meta_tst proc:file {read open};
allow meta_tst audio_device:chr_file rw_file_perms; allow meta_tst audio_device:chr_file rw_file_perms;
allow meta_tst audio_device:dir w_dir_perms; allow meta_tst audio_device:dir w_dir_perms;
allow meta_tst audiohal_prop:property_service set; allow meta_tst audiohal_prop:property_service set;
#Data:W1745 #Data:W1745
# Purpose : Allow meta_tst to open and read proc/bootprof # Purpose : Allow meta_tst to open and read proc/bootprof
#allow meta_tst proc:file write; allow meta_tst proc:file write;
allow meta_tst proc:file getattr; allow meta_tst proc:file getattr;
# Date:W17.51 # Date:W17.51