From ffa4ed5121bde30eb244838b059f6dfc332816d2 Mon Sep 17 00:00:00 2001 From: Shanshan Guo Date: Sat, 18 Jan 2020 10:21:38 +0800 Subject: [PATCH] [ALPS04833608] SEPolicy: Add specail SELabel for /proc/chip [Detail] It has risk for allow process to get permission of /proc/chip by using u:object_r:proc:s0 To avoid that, need to Add specail SELabel for /proc/chip [Solution] Add specail SELabel for /proc/chip MTK-Commit-Id: 84d8e9654281e4f7ee8a602e91084c320feff658 Change-Id: Ia6d4be26491fa11f81734cbb80b0b98b2b88f64a CR-Id: ALPS04833608 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK --- non_plat/genfs_contexts | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/non_plat/genfs_contexts b/non_plat/genfs_contexts index 65fc010..edf72ff 100644 --- a/non_plat/genfs_contexts +++ b/non_plat/genfs_contexts @@ -28,8 +28,7 @@ genfscon proc /zraminfo u:object_r:proc_zraminfo:s0 genfscon proc /gpulog u:object_r:proc_gpulog:s0 genfscon proc /cpu/alignment u:object_r:proc_cpu_alignment:s0 genfscon proc /sched_debug u:object_r:proc_sched_debug:s0 -genfscon proc /chip/hw_ver u:object_r:proc_chip:s0 -genfscon proc /chip/info u:object_r:proc_chip:s0 +genfscon proc /chip u:object_r:proc_chip:s0 genfscon proc /atf_log u:object_r:proc_atf_log:s0 genfscon proc /gz_log u:object_r:proc_gz_log:s0 genfscon proc /last_kmsg u:object_r:proc_last_kmsg:s0