f1cabb065e
[Detail] remove workaround of data between core and vendor violator 1. remove audioserver.te violated setting violated by allow audioserver nvdata_file:dir violated by allow audioserver nvram_data_file:dir violated by allow audioserver thermal_manager_data_file:dir violated by allow audioserver mtk_audiohal_data_file:dir violated by allow audioserver thermal_manager_data_file:file violated by allow audioserver nvram_data_file:file violated by allow audioserver nvdata_file:file 2. remove mtk_hal_audio.te violated setting violated by allow mtk_hal_audio system_data_file:dir violated by allow mtk_hal_audio media_rw_data_file:dir violated by allow mtk_hal_audio radio_data_file:dir violated by allow mtk_hal_audio radio_data_file:file violated by allow mtk_hal_audio system_data_file:lnk_file violated by allow mtk_hal_audio system_data_file:file violated by allow mtk_hal_audio media_rw_data_file:file audiohal_data_file is defined as core_data_file_type it cant use in vendor partition. temporarily remove it. MTK-Commit-Id: c0453cc6ede361322deb8f138055accc473511b8 Change-Id: I15649ad3351f1a7ee29956668862aad05efc0778 CR-Id: ALPS03898061 Feature: Phone Sound
67 lines
1.8 KiB
Plaintext
67 lines
1.8 KiB
Plaintext
# ==============================================
|
|
# MTK Policy Rule for vendor
|
|
# ==============================================
|
|
|
|
# Data : WK14.39
|
|
# Operation : Migration
|
|
# Purpose : dump for debug
|
|
allow audioserver audiohal_prop:property_service set;
|
|
|
|
# Date: WK14.44
|
|
# Operation : Migration
|
|
# Purpose : EVDO
|
|
allow audioserver rpc_socket:sock_file write;
|
|
allow audioserver ttySDIO_device:chr_file rw_file_perms;
|
|
|
|
# Data: WK14.44
|
|
# Operation : Migration
|
|
# Purpose : for low SD card latency issue
|
|
allow audioserver sysfs_lowmemorykiller:file { read open };
|
|
|
|
# Data: WK14.45
|
|
# Operation : Migration
|
|
# Purpose : for change thermal policy when needed
|
|
allow audioserver proc_mtkcooler:dir search;
|
|
allow audioserver proc_mtktz:dir search;
|
|
allow audioserver proc_thermal:dir search;
|
|
|
|
# Date : WK15.03
|
|
# Operation : Migration
|
|
# Purpose : offloadservice
|
|
allow audioserver offloadservice_device:chr_file rw_file_perms;
|
|
|
|
# Date : WK16.17
|
|
# Operation : Migration
|
|
# Purpose: read/open sysfs node
|
|
allow audioserver sysfs_ccci:file r_file_perms;
|
|
|
|
# Date : WK16.18
|
|
# Operation : Migration
|
|
# Purpose: research root dir "/"
|
|
allow audioserver tmpfs:dir search;
|
|
|
|
# Date : WK16.18
|
|
# Operation : Migration
|
|
# Purpose: access sysfs node
|
|
#allow audioserver sysfs:file { open read write };
|
|
allow audioserver sysfs_ccci:dir search;
|
|
|
|
# Purpose: Dump debug info
|
|
allow audioserver debugfs_binder:dir search;
|
|
allow audioserver fuse:file write;
|
|
|
|
# Date : WK16.33
|
|
# Purpose: Allow to access ged for gralloc_extra functions
|
|
allow audioserver proc_ged:file {open read write ioctl getattr};
|
|
|
|
# Date : WK16.48
|
|
# Purpose: Allow to trigger AEE dump
|
|
allow audioserver aee_aed:unix_stream_socket connectto;
|
|
|
|
# Date : WK17.28
|
|
# Operation : MT6757 SQC
|
|
# Purpose : Change thermal config
|
|
allow audioserver mtk_thermal_config_prop:file { getattr open read };
|
|
allow audioserver mtk_thermal_config_prop:property_service set;
|
|
|