NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04160752] Add selinux policy for vold_prepare_subdirs

Browse Source 
It would get selinux violation in kernel 4.14.
To fix that, add the policy, vendor_configs_file:file map.

selinux violation log:
avc: denied { map } for pid=633 comm="vold_prepare_su" path="/vendor/etc/selinux/vendor_file_contexts" dev="dm-1" ino=44 scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:vendor_configs_file:s0

MTK-Commit-Id: 4b9d7e588a26e9557b15aee36351fb9baa169861

Change-Id: Ie41809a378e0d9f1f71f2e87ab23565a68d62fb7
CR-Id: ALPS04160752
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
This commit is contained in:
Denis Hsu 2020-01-18 10:07:45 +08:00
parent 463a35aa13
commit ddebab7641
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
non_plat/vold_prepare_subdirs.te Executable file
View File

@ -0,0 +1,10 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# volume manager
# Date : WK18.42
# Operation : Migration
# Purpose : kernel-4.14 migration
allow vold_prepare_subdirs vendor_configs_file:file map;