NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03951556] WMT: Move stp_dump to system image

Browse Source 
[Solution]
Move stp_dump to system image to follow SEPolicy rules

MTK-Commit-Id: f3e5e4f43b6c506109caf2e01d1a61ee0223300e

Change-Id: I1252c1e5b682f97ff36a66d070b33368be05fd0f
CR-Id: ALPS03951556
Feature: [Module]WMT Driver
Signed-off-by: Robbin Chiu <robbin.chiu@mediatek.com>
This commit is contained in:
Robbin Chiu 2020-01-18 10:05:30 +08:00 committed by Max Huang
parent 054e883e20
commit 8ef11ef3fe
3 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
non_plat/file.te
View File

@ -131,7 +131,7 @@ type ccci_cfg_file, file_type, data_file_type;
type c2k_file, file_type, data_file_type;
#For sensor
type sensor_data_file, file_type, data_file_type;
type stp_dump_data_file, file_type,data_file_type;
type stp_dump_data_file, file_type, data_file_type, core_data_file_type;
type sysfs_keypad_file, fs_type, sysfs_type;
type rild_via_socket, file_type;
type rpc_socket, file_type;

4
non_plat/file_contexts
View File

@ -61,7 +61,7 @@
/data/vendor/powerhal(/.*)? u:object_r:mtk_powerhal_data_file:s0
#/data/vendor/nfc(/.*)? u:object_r:nfc_data_file:s0
/data/connsyslog(/.*)? u:object_r:consyslog_data_file:s0
/data/vendor/stp_dump(/.*)? u:object_r:stp_dump_data_file:s0
/data/misc/stp_dump(/.*)? u:object_r:stp_dump_data_file:s0
/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0
# Misc data
@ -529,7 +529,7 @@
# System files
#
/(system\/vendor|vendor)/bin/audiocmdservice_atci u:object_r:audiocmdservice_atci_exec:s0
/(system\/vendor|vendor)/bin/stp_dump3 u:object_r:stp_dump3_exec:s0
/system/bin/stp_dump3 u:object_r:stp_dump3_exec:s0
/(system\/vendor|vendor)/bin/wmt_launcher u:object_r:mtk_wmt_launcher_exec:s0
/(system\/vendor|vendor)/bin/ccci_fsd u:object_r:ccci_fsd_exec:s0
/(system\/vendor|vendor)/bin/fuelgauged u:object_r:fuelgauged_exec:s0

10
non_plat/stp_dump3.te
View File

@ -6,8 +6,9 @@
# Type Declaration
# ==============================================
type stp_dump3_exec , exec_type, file_type, vendor_file_type;
type stp_dump3 ,domain;
type stp_dump3_exec, exec_type, file_type;
type stp_dump3, domain;
typeattribute stp_dump3 coredomain;
# ==============================================
# Android Policy Rule
@ -20,9 +21,14 @@ type stp_dump3 ,domain;
# ==============================================
# MTK Policy Rule
# ==============================================
file_type_auto_trans(stp_dump3,system_data_file,stp_dump_data_file)
allow stp_dump3 self:capability { net_admin fowner chown fsetid };
allow stp_dump3 self:netlink_socket { read write getattr bind create setopt };
allow stp_dump3 self:netlink_generic_socket { read write getattr bind create setopt };
allow stp_dump3 media_rw_data_file:dir { add_name setattr };
allow stp_dump3 media_rw_data_file:dir rmdir;
allow stp_dump3 media_rw_data_file:dir { open read write create setattr getattr add_name remove_name search};
allow stp_dump3 media_rw_data_file:file { open read write create setattr getattr append unlink rename};
allow stp_dump3 wmtdetect_device:chr_file { read write ioctl open };
allow stp_dump3 stpwmt_device:chr_file { read write ioctl open };
allow stp_dump3 tmpfs:lnk_file r_file_perms;