NekoSakura/android_device_mediatek_sepolicy

Go to file

Aayush Gupta 22380a4614 non_plat: Label /dev/tee* and grant required perms to domains

/dev/tee* are accessed by domains that interact with TEE and thus
require access to them too.

Test: Boot and observe that denials are not visible in logs anymore

Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: I7b0944a1063da8561d2928e4110674ce4845ecea

2020-12-30 17:00:34 +05:30

non_plat

non_plat: Label /dev/tee* and grant required perms to domains

2020-12-30 17:00:34 +05:30

plat_private

plat_private: Use newline at the end of service_contexts

2020-12-21 22:01:18 +05:30

plat_public

[ALPS04968083] SEPolicy: Modify sepolicy files mode and type

2020-12-21 22:01:08 +05:30

Android.mk

mediatek: Add a README and makefiles required for inclusion

2020-12-21 11:15:09 +05:30

MTK_LICENSE

[ALPS04410351] Add MTK_LICENSE

2020-01-18 10:10:42 +08:00

README.md

mediatek: Add a README and makefiles required for inclusion

2020-12-21 11:15:09 +05:30

sepolicy.mk

mediatek: Inherit lineage sepcific mediatek sepolicy

2020-12-24 16:56:51 +05:30

README.md

SELinux policy for MediaTek devices

Don't recurse into the platform makefiles. We don't care about them, and we don't want to force a reset of BOARD_SEPOLICY_DIRS.

If you want to use these policies, add a

include device/mediatek/sepolicy/sepolicy.mk

to your device's BoardConfig. It is highly recommended that in case you have your own BOARD_SEPOLICY_DIRS declaration, the inclusion happens before those lines

Repository Details

This repository uses device/mediatek/wembley-sepolicy as base till 4769fb0d973bf079934054c6c5423ca06d67010a. After that Google's device-specific changes starts.

Till 4769fb0d973bf079934054c6c5423ca06d67010a, this repository is similar to the basic sepolicy repository provided by MediaTek to the OEMs.