[ALPS04864227] add selinux rules for fixing system API dump issue

1. allow domain process can use fd
2. allow domain process can write data to file in /data/vendor/aee_exp/

MTK-Commit-Id: 7b021c62aa51a474e12c59a805f97b27b940e357

Change-Id: I286e248c8fd3fe05492753a91806c19ffce0079d
CR-Id: ALPS04864227
Feature: Android Exception Engine(AEE)
This commit is contained in:
Huaiming Li 2020-01-18 10:21:51 +08:00 committed by Larry Liang
parent 0b22c77f8b
commit 812b6fe928

View File

@ -27,4 +27,6 @@ allow {
# -untrusted_app_all # -untrusted_app_all
#} aee_aed:unix_stream_socket connectto; #} aee_aed:unix_stream_socket connectto;
allow { domain -coredomain -hal_configstore_server -vendor_init } aee_aedv:unix_stream_socket connectto; allow { domain -coredomain -hal_configstore_server -vendor_init } aee_aedv:unix_stream_socket connectto;
allow { domain -coredomain -hal_configstore_server -vendor_init } aee_exp_vendor_file:file w_file_perms;
allow { domain -coredomain -hal_configstore_server -vendor_init } aee_aedv:fd use;