NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03825066] Remove unused sepolicy

Browse Source 
[Detail] Because "ro.vendor.net.upload.benchmark.default"
is unlabeled property, so all use it will have name of
vendor_default_prop

[Solution] Need owner to relabel the property of
"ro.vendor.net.upload.benchmark.default"

MTK-Commit-Id: 3a772e2b252536c9bbe9829b75f3464c2df68248

Change-Id: I42f341bf01cea16a16a0e73d13e0c03b5c270dad
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
This commit is contained in:
mtk12101 2020-01-18 09:50:11 +08:00
parent cfab913757
commit b086e609ac
36 changed files with 0 additions and 229 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
non_plat/aee_aed.te
View File

@ -51,11 +51,6 @@ allow aee_aed exec_type:file r_file_perms;
# Purpose: Allow aee_aed to read /proc/cpu/alignment
allow aee_aed proc_cpu_alignment:file { write open };
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(aee_aed, vendor_default_prop)
# Purpose: Allow aee_aed to access /sys/devices/virtual/timed_output/vibrator/enable
allow aee_aed sysfs_vibrator_setting:dir search;
allow aee_aed sysfs_vibrator_setting:file w_file_perms;

5
non_plat/aee_aedv.te
View File

@ -393,11 +393,6 @@ allow aee_aedv proc_hw_ver:file r_file_perms;
# Purpose: Allow aee_aedv to read /proc/sched_debug
allow aee_aedv proc_sched_debug:file r_file_perms;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(aee_aedv, vendor_default_prop)
# Purpose: Allow aee_aedv to read /proc/atf_log
allow aee_aedv proc_atf_log:dir search;

5
non_plat/audioserver.te
View File

@ -63,8 +63,3 @@ allow audioserver aee_aed:unix_stream_socket connectto;
# Purpose : Change thermal config
allow audioserver mtk_thermal_config_prop:file { getattr open read };
allow audioserver mtk_thermal_config_prop:property_service set;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(audioserver, vendor_default_prop)

5
non_plat/boot_logo_updater.te
View File

@ -20,8 +20,3 @@ allow boot_logo_updater proc_lk_env:file rw_file_perms;
# Operation : Global_Device/Uniservice Feature
# Purpose : for it to read-write SysEnv data
allow boot_logo_updater para_block_device:blk_file rw_file_perms;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(boot_logo_updater, vendor_default_prop)

5
non_plat/bootanim.te
View File

@ -21,8 +21,3 @@ allow bootanim proc_ged:file {open read write ioctl getattr};
# Purpose : For MTK perfmgr
allow bootanim proc_perfmgr:dir {search read};
allow bootanim proc_perfmgr:file {open read ioctl};
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(bootanim, vendor_default_prop)

5
non_plat/cameraserver.te
View File

@ -394,8 +394,3 @@ allow cameraserver camera_mfb_device:chr_file rw_file_perms;
# Purpose: Allow permgr access
allow cameraserver proc_perfmgr:dir {read search};
allow cameraserver proc_perfmgr:file {open read ioctl};
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(cameraserver, vendor_default_prop)

9
non_plat/crash_dump.te
View File

@ -1,9 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(crash_dump, vendor_default_prop)

5
non_plat/drmserver.te
View File

@ -5,8 +5,3 @@
# Date : WK16.33
# Purpose: Allow to access ged for gralloc_extra functions
allow drmserver proc_ged:file {open read write ioctl getattr};
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(drmserver, vendor_default_prop)

5
non_plat/em_svr.te
View File

@ -30,8 +30,3 @@ allow em_svr nvram_device:blk_file { open read write };
# Date: WK1812
# Purpose: add for Gyroscope sensor
allow em_svr gyroscope_device:chr_file { read ioctl open };
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(em_svr, vendor_default_prop)

8
non_plat/gatekeeperd.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(gatekeeperd, vendor_default_prop)

8
non_plat/hwservicemanager.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(hwservicemanager, vendor_default_prop)

8
non_plat/installd.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(installd, vendor_default_prop)

5
non_plat/keystore.te
View File

@ -12,8 +12,3 @@ allow keystore app_data_file:file write;
# Purpose : Fix keystore boot selinux violation
#allow keystore debugfs_tracing:file write;
allow hal_keymaster_default debugfs_tracing:file write;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(keystore, vendor_default_prop)

5
non_plat/lmkd.te
View File

@ -17,8 +17,3 @@ dontaudit lmkd zygote:dir rw_dir_perms;
# path=2F6465762F6173686D656D2F4469736361726461626C654D656D6F72794173686D656D416C6C6F6361746F72202864656C6574656429
# dev="tmpfs" ino=14475 scontext=u:r:lmkd:s0 tcontext=u:r:platform_app:s0 tclass=fd permissive=0
dontaudit lmkd platform_app:fd use;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(lmkd, vendor_default_prop)

8
non_plat/logd.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(logd, vendor_default_prop)

5
non_plat/mediadrmserver.te
View File

@ -14,8 +14,3 @@ allow mediadrmserver proc_ged:file {open read write ioctl getattr};
# Purpose : Change thermal config
allow mediaserver mtk_thermal_config_prop:file { getattr open read };
allow mediaserver mtk_thermal_config_prop:property_service set;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(mediadrmserver, vendor_default_prop)

5
non_plat/mediaextractor.te
View File

@ -5,8 +5,3 @@
# Date : WK16.33
# Purpose: Allow to access ged for gralloc_extra functions
allow mediaextractor proc_ged:file {open read write ioctl getattr};
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(mediaextractor, vendor_default_prop)

8
non_plat/mediametrics.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(mediametrics, vendor_default_prop)

5
non_plat/mediaserver.te
View File

@ -391,8 +391,3 @@ allow mediaserver mtk_hal_keymanage:binder call;
# Purpose : Allow mediadrmserver to call vendor.mediatek.hardware.keymanage@1.0-service.
hal_client_domain(mediaserver , hal_keymaster)
allow mediaserver mtk_hal_keymanage_hwservice:hwservice_manager find;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(mediaserver, vendor_default_prop)

5
non_plat/mobile_log_d.te
View File

@ -56,8 +56,3 @@ allow mobile_log_d port:tcp_socket { name_connect name_bind };
allow mobile_log_d mobile_log_d:tcp_socket { create connect setopt bind };
allow mobile_log_d mobile_log_d:tcp_socket { bind setopt listen accept read write };
allow mobile_log_d node:tcp_socket node_bind;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(mobile_log_d, vendor_default_prop)

5
non_plat/netd.te
View File

@ -60,8 +60,3 @@ allow netd untrusted_app:fd use;
# Purpose : CTS for wifi
allow netd untrusted_app:unix_stream_socket { read write getopt setopt};
allow netd isolated_app:fd use;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(netd, vendor_default_prop)

5
non_plat/netdiag.te
View File

@ -26,8 +26,3 @@ allow netdiag mmc_prop:file { getattr open };
# purpose: allow netdiag to access storage in new version
allow netdiag media_rw_data_file:file { create_file_perms };
allow netdiag media_rw_data_file:dir { create_dir_perms };
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(netdiag, vendor_default_prop)

8
non_plat/servicemanager.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(servicemanager, vendor_default_prop)

5
non_plat/surfaceflinger.te
View File

@ -59,8 +59,3 @@ allow surfaceflinger proc_perfmgr:file {open read ioctl};
get_prop(surfaceflinger, graphics_hwc_pid_prop)
allow surfaceflinger hal_graphics_composer_default:dir search;
allow surfaceflinger hal_graphics_composer_default:lnk_file read;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(surfaceflinger, vendor_default_prop)

5
non_plat/system_server.te
View File

@ -191,8 +191,3 @@ allow system_server mtk_thermal_config_prop:property_service set;
# Purpose : perfmgr permission
allow system_server proc_perfmgr:dir {read search};
allow system_server proc_perfmgr:file {open read ioctl};
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(system_server, vendor_default_prop)

8
non_plat/thermalserviced.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(thermalserviced, vendor_default_prop)

8
non_plat/tzdatacheck.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(tzdatacheck, vendor_default_prop)

8
non_plat/vdc.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ============
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(atcid, vendor_default_prop)

8
non_plat/vndservicemanager.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(vndservicemanager, vendor_default_prop)

5
non_plat/vold.te
View File

@ -20,8 +20,3 @@ dontaudit vold proc_mtktz:dir { read open };
dontaudit vold proc_thermal:dir { read open };
allow vold mtd_device:blk_file rw_file_perms;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(vold, vendor_default_prop)

8
non_plat/vold_prepare_subdirs.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(vold_prepare_subdirs, vendor_default_prop)

8
non_plat/wificond.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : wificond
get_prop(wificond, vendor_default_prop)

5
non_plat/zygote.te
View File

@ -10,8 +10,3 @@ allow zygote proc_ged:file {open read write ioctl getattr};
# Purpose: Allow to access gpu for memtrack functions
allow zygote gpu_device:dir search;
allow zygote gpu_device:chr_file { open read write ioctl getattr};
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(zygote, vendor_default_prop)

8
plat_private/hal_allocator_default.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(hal_allocator_default, vendor_default_prop)

8
plat_private/statsd.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(statsd, vendor_default_prop)

8
plat_private/storaged.te
View File

@ -1,8 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(storaged, vendor_default_prop)