From ddebab764111b415452177ef6ac4badb285d06b8 Mon Sep 17 00:00:00 2001 From: Denis Hsu Date: Sat, 18 Jan 2020 10:07:45 +0800 Subject: [PATCH] [ALPS04160752] Add selinux policy for vold_prepare_subdirs It would get selinux violation in kernel 4.14. To fix that, add the policy, vendor_configs_file:file map. selinux violation log: avc: denied { map } for pid=633 comm="vold_prepare_su" path="/vendor/etc/selinux/vendor_file_contexts" dev="dm-1" ino=44 scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:vendor_configs_file:s0 MTK-Commit-Id: 4b9d7e588a26e9557b15aee36351fb9baa169861 Change-Id: Ie41809a378e0d9f1f71f2e87ab23565a68d62fb7 CR-Id: ALPS04160752 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK --- non_plat/vold_prepare_subdirs.te | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100755 non_plat/vold_prepare_subdirs.te diff --git a/non_plat/vold_prepare_subdirs.te b/non_plat/vold_prepare_subdirs.te new file mode 100755 index 0000000..3c531e2 --- /dev/null +++ b/non_plat/vold_prepare_subdirs.te @@ -0,0 +1,10 @@ +# ============================================== +# MTK Policy Rule +# ============================================== + +# volume manager + +# Date : WK18.42 +# Operation : Migration +# Purpose : kernel-4.14 migration +allow vold_prepare_subdirs vendor_configs_file:file map;