NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03917508] remvoe neverallow rule for Android P

Browse Source 
Update the rule of MM feature to follow Android P

MTK-Commit-Id: c1c04c0eb241b562ee73a0aaf250a8604c2a2093

Change-Id: Iac8c86c545cf53d7e837884fb34335a80ebb749e
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
CR-Id: ALPS03917508
This commit is contained in:
Legis Lu 2020-01-18 09:46:52 +08:00 committed by Legis Lu (呂立偉)
parent 0db3e13890
commit 923a563374
1 changed files with 13 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
non_plat/mediaserver.te
View File

@ -23,12 +23,12 @@ allow mediaserver lens_device:chr_file rw_file_perms;
allow mediaserver sdcard_type:dir { w_dir_perms create }; allow mediaserver sdcard_type:dir { w_dir_perms create };
allow mediaserver sdcard_type:file create; allow mediaserver sdcard_type:file create;
typeattribute mediaserver data_between_core_and_vendor_violators; typeattribute mediaserver data_between_core_and_vendor_violators;
allow mediaserver nvram_data_file:dir w_dir_perms; #allow mediaserver nvram_data_file:dir w_dir_perms;
allow mediaserver nvram_data_file:file create_file_perms; #allow mediaserver nvram_data_file:file create_file_perms;
allow mediaserver nvram_data_file:lnk_file read; allow mediaserver nvram_data_file:lnk_file read;
allow mediaserver nvdata_file:lnk_file read; allow mediaserver nvdata_file:lnk_file read;
allow mediaserver nvdata_file:dir w_dir_perms; #allow mediaserver nvdata_file:dir w_dir_perms;
allow mediaserver nvdata_file:file create_file_perms; #allow mediaserver nvdata_file:file create_file_perms;
allow mediaserver sdcard_type:dir remove_name; allow mediaserver sdcard_type:dir remove_name;
allow mediaserver sdcard_type:file unlink; allow mediaserver sdcard_type:file unlink;
@ -153,9 +153,9 @@ allow mediaserver audiohal_prop:property_service set;
# Data : WK14.39 # Data : WK14.39
# Operation : Migration # Operation : Migration
# Purpose : HW encrypt SW codec # Purpose : HW encrypt SW codec
allow mediaserver mediaserver_data_file:file create_file_perms; #allow mediaserver mediaserver_data_file:file create_file_perms;
allow mediaserver mediaserver_data_file:dir create_dir_perms; #allow mediaserver mediaserver_data_file:dir create_dir_perms;
allow mediaserver sec_device:chr_file r_file_perms; #allow mediaserver sec_device:chr_file r_file_perms;
# Date : WK14.40 # Date : WK14.40
# Operation : Migration # Operation : Migration
@ -224,8 +224,8 @@ allow mediaserver sysfs_lowmemorykiller:file { read open };
allow mediaserver proc_mtkcooler:dir search; allow mediaserver proc_mtkcooler:dir search;
allow mediaserver proc_mtktz:dir search; allow mediaserver proc_mtktz:dir search;
allow mediaserver proc_thermal:dir search; allow mediaserver proc_thermal:dir search;
allow mediaserver thermal_manager_data_file:file create_file_perms; #allow mediaserver thermal_manager_data_file:file create_file_perms;
allow mediaserver thermal_manager_data_file:dir { rw_dir_perms setattr }; #allow mediaserver thermal_manager_data_file:dir { rw_dir_perms setattr };
# Date : WK14.46 # Date : WK14.46
# Operation : Migration # Operation : Migration
@ -285,8 +285,8 @@ allow mediaserver surfaceflinger:fifo_file {read write};
# Date : WK15.45 # Date : WK15.45
# Purpose : camera read/write /nvcfg/camera data # Purpose : camera read/write /nvcfg/camera data
allow mediaserver nvcfg_file:dir create_dir_perms; #allow mediaserver nvcfg_file:dir create_dir_perms;
allow mediaserver nvcfg_file:file create_file_perms; #allow mediaserver nvcfg_file:file create_file_perms;
# Date : WK15.46 # Date : WK15.46
@ -306,7 +306,8 @@ allow mediaserver camera_tsf_device:chr_file rw_file_perms;
# Purpose : add permission for thermal manager # Purpose : add permission for thermal manager
domain_auto_trans(mediaserver, thermal_manager_exec, thermal_manager) domain_auto_trans(mediaserver, thermal_manager_exec, thermal_manager)
typeattribute mediaserver system_executes_vendor_violators; typeattribute mediaserver system_executes_vendor_violators;
allow mediaserver thermal_manager_exec:file { read getattr open execute}; #allow mediaserver thermal_manager_exec:file { read getattr open execute};
allow mediaserver thermal_manager_exec:file { read getattr open};
# Date : WK16.32 # Date : WK16.32
# Operation : N Migration # Operation : N Migration