NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04424750] SEPolicy:add perm for system_server

Browse Source 
For Android Q, there is a more stringent restriction for ioctl,
system_server need some permissoin to access proc_ged by ioctlcmd
in MTBF.

MTK-Commit-Id: f4a14dea0b118232234da13c860c66e1b31b3c5d

Change-Id: Idd1b3376f8980273f5e91985d91729c1ab50dd59
CR-Id: ALPS04424750
Feature: [Module]SystemServer
This commit is contained in:
mtk07742 2020-01-18 10:11:50 +08:00 committed by Yongjun Luo
parent a0555034dc
commit bc8a258620
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
non_plat/system_server.te
View File

@ -205,4 +205,9 @@ get_prop(system_server, persist_mtk_aee_prop);
# Date : W19.15
# Operation : alarm device permission
# Purpose : support power-off alarm
allow system_server alarm_device:chr_file rw_file_perms;
allow system_server alarm_device:chr_file rw_file_perms;
# Date : WK19.7
# Operation: Q migration
# Purpose : Allow system_server to use ioctl/ioctlcmd
allowxperm system_server proc_ged:file ioctl GED_BRIDGE_IO_LOG_BUF_GET;