427c135bd6
[Detail] Only BASIC Sepolicy need to be applyed for BASIC, we separate basic/bsp sepolicy for BASIC. This workaround is for fixing the build errors that cause by the declarations were defined in bsp/ dir and neverallow rules. MTK-Commit-Id: f1ed54e84b85f73e20dcc8c2ac5f0c42fddedc77 Change-Id: I568873fcc272d04b018efc4be00924b751bb3775 CR-Id: ALPS04340791 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
34 lines
1.0 KiB
Plaintext
34 lines
1.0 KiB
Plaintext
# ==============================================
|
|
# Policy File of /system/bin/md_monitor Executable File
|
|
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
|
|
typeattribute md_monitor coredomain;
|
|
typeattribute md_monitor mlstrustedsubject;
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
|
|
|
|
# Date : 2015/10/12
|
|
# Operation : IT
|
|
# Purpose : Allow md_monitor to set
|
|
allow md_monitor ccci_device:chr_file rw_file_perms;
|
|
allow md_monitor sysfs_ccci:dir search;
|
|
allow md_monitor sysfs_ccci:file r_file_perms;
|
|
allow md_monitor file_contexts_file:file r_file_perms;
|
|
#allow md_monitor sysfs:file r_file_perms;
|
|
|
|
# Date : 2017/10/16
|
|
# Operation : IT
|
|
# Purpose : Allow md_monitor to use restore_image_from_pt()
|
|
allow md_monitor block_device:dir search;
|
|
allow md_monitor md_block_device:blk_file r_file_perms;
|
|
allow md_monitor self:capability { chown };
|
|
allow md_monitor storage_file:dir search;
|
|
allow md_monitor tmpfs:lnk_file read;
|