bo.shang 84b0b8448d [ALPS04027460] Add selinux permission
create mdlog folder in data for meta mode

MTK-Commit-Id: 0996cc7cf243909b06862c32f11b43194f20ca0c

Change-Id: I4e0f5aaab5cf5b363a0214b5ea8ce6e994dec69f
CR-Id: ALPS04027460
Feature: Modem Log Tool
2020-01-18 10:05:34 +08:00

28 lines
963 B
Plaintext

# ==============================================
# MTK Policy Rule
# ==============================================
# volume manager
# Date : WK16.19
# Operation : Migration
# Purpose : unmount /mnt/cd-rom. It causes by unmountAll() when VolumeManager starts
allow vold iso9660:filesystem unmount;
# Date : WK16.19
# Operation : Migration
# Purpose : vold will traverse /proc when remountUid().
# It will trigger violation if mtk customize some label in /proc.
# However, we should ignore the violation if the processes never access the storage.
dontaudit vold proc_battery_cmd:dir { read open };
dontaudit vold proc_mtkcooler:dir { read open };
dontaudit vold proc_mtktz:dir { read open };
dontaudit vold proc_thermal:dir { read open };
# Date : WK18.30
# Operation : Migration
# Purpose : vold create mdlog folder in data for meta mode.
allow vold mdlog_data_file:dir { create_dir_perms };
allow vold mtd_device:blk_file rw_file_perms;