NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "[ALPS03825066] Fix boot fail" into alps-trunk-p0.basic

Browse Source 
Change-Id: I815bbbcb83e97367c2e0e59494826e83e6c38cc4
MTK-Commit-Id: 96cdedafea2eacc5c66fc4365e0768cd9c3f518c
This commit is contained in:
Bo Ye (叶波) 2020-01-18 09:48:40 +08:00 committed by Gerrit Code Review
commit fd5582fcf8
11 changed files with 67 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
non_plat/bootanim.te
View File

@ -21,3 +21,8 @@ allow bootanim proc_ged:file {open read write ioctl getattr};
# Purpose : For MTK perfmgr # Purpose : For MTK perfmgr
allow bootanim proc_perfmgr:dir {search read}; allow bootanim proc_perfmgr:dir {search read};
allow bootanim proc_perfmgr:file {open read ioctl}; allow bootanim proc_perfmgr:file {open read ioctl};
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(bootanim, vendor_default_prop)

8
non_plat/installd.te Normal file
View File

@ -0,0 +1,8 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(installd, vendor_default_prop)

5
non_plat/keystore.te
View File

@ -12,3 +12,8 @@ allow keystore app_data_file:file write;
# Purpose : Fix keystore boot selinux violation # Purpose : Fix keystore boot selinux violation
#allow keystore debugfs_tracing:file write; #allow keystore debugfs_tracing:file write;
allow hal_keymaster_default debugfs_tracing:file write; allow hal_keymaster_default debugfs_tracing:file write;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(keystore, vendor_default_prop)

5
non_plat/mediadrmserver.te
View File

@ -14,3 +14,8 @@ allow mediadrmserver proc_ged:file {open read write ioctl getattr};
# Purpose : Change thermal config # Purpose : Change thermal config
allow mediaserver mtk_thermal_config_prop:file { getattr open read }; allow mediaserver mtk_thermal_config_prop:file { getattr open read };
allow mediaserver mtk_thermal_config_prop:property_service set; allow mediaserver mtk_thermal_config_prop:property_service set;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(mediadrmserver, vendor_default_prop)

5
non_plat/mediaextractor.te
View File

@ -5,3 +5,8 @@
# Date : WK16.33 # Date : WK16.33
# Purpose: Allow to access ged for gralloc_extra functions # Purpose: Allow to access ged for gralloc_extra functions
allow mediaextractor proc_ged:file {open read write ioctl getattr}; allow mediaextractor proc_ged:file {open read write ioctl getattr};
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(mediaextractor, vendor_default_prop)

8
non_plat/mediametrics.te Normal file
View File

@ -0,0 +1,8 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(mediametrics, vendor_default_prop)

5
non_plat/mobile_log_d.te
View File

@ -56,3 +56,8 @@ allow mobile_log_d port:tcp_socket { name_connect name_bind };
allow mobile_log_d mobile_log_d:tcp_socket { create connect setopt bind }; allow mobile_log_d mobile_log_d:tcp_socket { create connect setopt bind };
allow mobile_log_d mobile_log_d:tcp_socket { bind setopt listen accept read write }; allow mobile_log_d mobile_log_d:tcp_socket { bind setopt listen accept read write };
allow mobile_log_d node:tcp_socket node_bind; allow mobile_log_d node:tcp_socket node_bind;
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(mobile_log_d, vendor_default_prop)

5
non_plat/netdiag.te
View File

@ -26,3 +26,8 @@ allow netdiag mmc_prop:file { getattr open };
# purpose: allow netdiag to access storage in new version # purpose: allow netdiag to access storage in new version
allow netdiag media_rw_data_file:file { create_file_perms }; allow netdiag media_rw_data_file:file { create_file_perms };
allow netdiag media_rw_data_file:dir { create_dir_perms }; allow netdiag media_rw_data_file:dir { create_dir_perms };
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(netdiag, vendor_default_prop)

5
non_plat/system_server.te
View File

@ -191,3 +191,8 @@ allow system_server mtk_thermal_config_prop:property_service set;
# Purpose : perfmgr permission # Purpose : perfmgr permission
allow system_server proc_perfmgr:dir {read search}; allow system_server proc_perfmgr:dir {read search};
allow system_server proc_perfmgr:file {open read ioctl}; allow system_server proc_perfmgr:file {open read ioctl};
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(system_server, vendor_default_prop)

8
plat_private/statsd.te Normal file
View File

@ -0,0 +1,8 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(statsd, vendor_default_prop)

8
plat_private/storaged.te Normal file
View File

@ -0,0 +1,8 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK18.20
# Operation : Migration
# Purpose : no permission for vendor_default_prop
get_prop(storaged, vendor_default_prop)