android_device_mediatek_sep.../non_plat/hal_bootctl_default.te
haohsiang.hsu 40aef819da [ALPS04345011] Add bootctrl selinux for migration
Add ioctl commad to ioctl_defines.
Add bootctrl selinux policy for migration

MTK-Commit-Id: 153ba94f12253fd5564f93ebe946e32ee1fe25b2

Change-Id: Iebae37db9cd9988079ecca35e5e82d3c4c8021d6
CR-Id: ALPS04345011
Feature: [Android Default] SIU (SD Image Update)
2020-01-18 10:09:10 +08:00

16 lines
805 B
Plaintext

# Add for bootctl
#============= hal_bootctl_default ==============
allow hal_bootctl_default para_block_device:blk_file { read open write};
allow hal_bootctl_default rootfs:file { read getattr open };
allow hal_bootctl_default sysfs:dir { read open };
allow hal_bootctl_default block_device:dir search;
allow hal_bootctl_default misc_sd_device:chr_file rw_file_perms;
allow hal_bootctl_default bootdevice_block_device:blk_file rw_file_perms;
allowxperm hal_bootctl_default bootdevice_block_device:blk_file ioctl MMC_IOCTLCMD;
allowxperm hal_bootctl_default bootdevice_block_device:blk_file ioctl UFS_IOCTLCMD;
allow hal_bootctl_default proc_cmdline:file r_file_perms;
allow hal_bootctl_default sysfs_boot_type:file r_file_perms;
userdebug_or_eng(`
allow hal_bootctl_default self:capability sys_rawio;
')