NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03902666] Sepolicy: remove violate properties setting

Browse Source 
[Detail]
1.Property new change
neverallow coredomain from writing vendor properties
(allow audioserver_28_0 audiohal_prop (property_service (set)))
(allow audioserver_28_0 mtk_thermal_config_prop (property_service (set)))

audio_hal property which prefix is af. use to audiodump.
it will replace by the audio_prop which property prefix is vendor.af

before, mtk_thermal_config_prop use to set powerhal.
And we use it by HIDL now, so this permission can remove.

[Solution]
remove violate properties setting.

MTK-Commit-Id: 2942812bb4a57655898d407f84162fbdae9c3fc9

Change-Id: I1a01ddd8b83fa7eb0c499f67400660b738e9b986
CR-Id: ALPS03902666
Feature: [Module]Native AudioFlinger
This commit is contained in:
chien-wei hsu 2020-01-18 09:58:29 +08:00 committed by Chien-Wei Hsu
parent 8288536631
commit d1522f4166
2 changed files with 0 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
non_plat/audioserver.te
View File

@ -2,12 +2,6 @@
# MTK Policy Rule for vendor
# ==============================================
# Data : WK14.39
# Operation : Migration
# Purpose : dump for debug
typeattribute audioserver system_writes_vendor_properties_violators;
allow audioserver audiohal_prop:property_service set;
# Date: WK14.44
# Operation : Migration
# Purpose : EVDO
@ -58,9 +52,3 @@ allow audioserver proc_ged:file {open read write ioctl getattr};
# Date : WK16.48
# Purpose: Allow to trigger AEE dump
allow audioserver aee_aed:unix_stream_socket connectto;
# Date : WK17.28
# Operation : MT6757 SQC
# Purpose : Change thermal config
allow audioserver mtk_thermal_config_prop:file { getattr open read };
allow audioserver mtk_thermal_config_prop:property_service set;

2
non_plat/property_contexts
View File

@ -99,10 +99,8 @@ vendor.debug.gps. u:object_r:mnld_prop:s0
#=============allow audiohal==============
streamout. u:object_r:audiohal_prop:s0
af. u:object_r:audiohal_prop:s0
streamin. u:object_r:audiohal_prop:s0
a2dp. u:object_r:audiohal_prop:s0
persist.af. u:object_r:audiohal_prop:s0
#=============allow wmt ==============
persist.vendor.connsys. u:object_r:wmt_prop:s0