NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03881723] vendor_init: Fix bootup denial

Browse Source 
[Detail] vendor_init is new introduced in Android P,
and related policies have not been created yet.

[Solution] Add policies for vendor_init

MTK-Commit-Id: 00dc11bf94cbb7909ef58482d7726ebe8b954782

Change-Id: Ic2286e8e3e67b4005c7e2df18d217275f069f208
CR-Id: ALPS03881723
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
This commit is contained in:
Lili Lin 2020-01-18 09:47:51 +08:00
parent 9ac183515e
commit d243f35618
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
non_plat/vendor_init.te Normal file
View File

@ -0,0 +1,22 @@
allow vendor_init exported3_system_prop:property_service set;
allow vendor_init bt_prop:property_service set;
allow vendor_init dalvik_prop:property_service set;
allow vendor_init ffs_prop:property_service set;
allow vendor_init mediatek_prop:property_service set;
allow vendor_init mtk_md_version_prop:property_service set;
allow vendor_init mtk_volte_prop:property_service set;
allow vendor_init usp_prop:property_service set;
allow vendor_init vendor_radio_prop:property_service set;
allow vendor_init proc:file write;
allow vendor_init proc_bootprof:file write;
allow vendor_init rootfs:dir { write add_name setattr };
allow vendor_init self:capability sys_module;
allow vendor_init tmpfs:dir { write create add_name };
allow vendor_init vendor_file:system module_load;
allow vendor_init kmsg_device:chr_file unlink;