# ============================================== # MTK Policy Rule # ============================================== # volume manager # Date : WK16.19 # Operation : Migration # Purpose : unmount /mnt/cd-rom. It causes by unmountAll() when VolumeManager starts allow vold iso9660:filesystem unmount; # Date : WK16.19 # Operation : Migration # Purpose : vold will traverse /proc when remountUid(). # It will trigger violation if mtk customize some label in /proc. # However, we should ignore the violation if the processes never access the storage. dontaudit vold proc_battery_cmd:dir { read open }; dontaudit vold proc_mtkcooler:dir { read open }; dontaudit vold proc_mtktz:dir { read open }; dontaudit vold proc_thermal:dir { read open }; # Date : WK18.30 # Operation : Migration # Purpose : vold create mdlog folder in data for meta mode. allow vold mdlog_data_file:dir { create_dir_perms }; allow vold mtd_device:blk_file rw_file_perms;