NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04760297] SEPolicy Optimize

Browse Source 
Revise high risk SEPolicies.

MTK-Commit-Id: 54290cb8aeb0fbb67310ed0cffe826684158effe

CR-Id: ALPS04760297
Feature: Connsys Log Tool
Change-Id: I369c7a917f8ee9cc95e0db14e552ce9195583a14
This commit is contained in:
Guoyi Qu 2020-01-18 10:20:40 +08:00
parent ba7ce778ea
commit cf0ffa1738
3 changed files with 6 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
non_plat/connsyslogger.te
View File

@ -21,8 +21,8 @@ allow connsyslogger consyslog_data_file:file { create_file_perms };
allow connsyslogger system_data_file:dir { create_dir_perms relabelfrom};
#consys logger socket access
allow connsyslogger property_socket:sock_file write;
allow connsyslogger init:unix_stream_socket connectto;
#allow connsyslogger property_socket:sock_file write;
#allow connsyslogger init:unix_stream_socket connectto;
allow connsyslogger tmpfs:lnk_file { create_file_perms };

5
non_plat/mdlogger.te
View File

@ -1,7 +1,6 @@
#allow mdlogger to set property
allow mdlogger debug_mdlogger_prop:property_service set;
allow mdlogger debug_prop:property_service set;
set_prop(mdlogger, debug_mdlogger_prop)
set_prop(mdlogger, debug_prop)
# ccci device for internal modem
allow mdlogger ccci_device:chr_file { rw_file_perms };

4
plat_private/mdlogger.te
View File

@ -13,8 +13,8 @@ binder_use(mdlogger)
binder_service(mdlogger)
# modem logger socket access
allow mdlogger init:unix_stream_socket connectto;
allow mdlogger property_socket:sock_file write;
#allow mdlogger init:unix_stream_socket connectto;
#allow mdlogger property_socket:sock_file write;
allow mdlogger platform_app:unix_stream_socket connectto;
allow mdlogger shell_exec:file { rx_file_perms };
allow mdlogger system_file:file x_file_perms;