diff --git a/non_plat/e2fs.te b/non_plat/e2fs.te index 865bd21..df75b74 100644 --- a/non_plat/e2fs.te +++ b/non_plat/e2fs.te @@ -12,3 +12,9 @@ allow e2fs nvdata_device:blk_file rw_file_perms; allow e2fs nvcfg_block_device:blk_file rw_file_perms; allow e2fs devpts:chr_file {read write}; + +# Date : WK18.23 +# Operation: P migration +# Purpose : Allow mke2fs to format userdata and cache partition +allow e2fs cache_block_device:blk_file rw_file_perms; +allow e2fs userdata_block_device:blk_file rw_file_perms; diff --git a/non_plat/factory.te b/non_plat/factory.te index 52367cc..7b375ba 100644 --- a/non_plat/factory.te +++ b/non_plat/factory.te @@ -353,3 +353,14 @@ allow factory sysfs:file { read open }; # For touch auto test allow factory sysfs_tpd_setting:dir search; allow factory sysfs_tpd_setting:file { read getattr open }; + +# Date : WK18.23 +# Operation: P migration +# Purpose : Allow factory to unmount partition, stop service, and then erase partition +allow factory vendor_shell_exec:file { read execute open execute_no_trans }; +allow factory vendor_toolbox_exec:file { execute_no_trans }; +allow factory labeledfs:filesystem { unmount }; +allow factory proc_cmdline:file { read open getattr }; +allow factory factory:capability { sys_boot sys_admin}; +allow factory sysfs_dt_firmware_android:file { read open getattr }; +allow factory sysfs_dt_firmware_android:dir { read open search }; \ No newline at end of file diff --git a/non_plat/meta_tst.te b/non_plat/meta_tst.te index 0606720..16160e0 100644 --- a/non_plat/meta_tst.te +++ b/non_plat/meta_tst.te @@ -382,3 +382,14 @@ allow meta_tst block_device:dir search; # Purpose : Allow meta_tst to access tpd sysfs nodes for CTP test allow meta_tst sysfs_tpd_setting:dir search; allow meta_tst sysfs_tpd_setting:file { read getattr open }; + +# Date : WK18.24 +# Operation: P migration +# Purpose : Allow meta_tst to unmount partition, stop service, and then erase partition +allow meta_tst vendor_shell_exec:file { read execute open execute_no_trans }; +allow meta_tst vendor_toolbox_exec:file { execute_no_trans }; +allow meta_tst labeledfs:filesystem { unmount }; +allow meta_tst proc_cmdline:file { read open getattr }; +allow meta_tst meta_tst:capability { sys_admin }; +allow meta_tst sysfs_dt_firmware_android:file { read open getattr }; +allow meta_tst sysfs_dt_firmware_android:dir { read open search }; \ No newline at end of file diff --git a/plat_private/emdlogger.te b/plat_private/emdlogger.te index 1934f8e..af01e0d 100755 --- a/plat_private/emdlogger.te +++ b/plat_private/emdlogger.te @@ -76,7 +76,4 @@ allow emdlogger proc_cmdline:file { read getattr open }; allow emdlogger sysfs_dt_firmware_android:dir search; allow emdlogger sysfs_dt_firmware_android:file { read open getattr }; allow emdlogger system_file:dir open; -allow emdlogger vendor_default_prop:file { read getattr open }; -allow emdlogger mota_sysfile:dir search; - - +allow emdlogger vendor_default_prop:file { read getattr open }; \ No newline at end of file