5849c224e3
1. Mark polices which accessing proc/sysfs file system
2. Add violator attribute to modules violate vendor/system rule.
MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8
Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
27 lines
789 B
Plaintext
27 lines
789 B
Plaintext
# ==============================================
|
|
# MTK Policy Rule
|
|
# ============
|
|
|
|
# Date : WK14.37
|
|
# Operation : Migration
|
|
# Purpose : for opetator
|
|
typeattribute bootanim data_between_core_and_vendor_violators;
|
|
allow bootanim custom_file:dir search;
|
|
allow bootanim custom_file:file r_file_perms;
|
|
allow bootanim bootani_prop:property_service set;
|
|
|
|
# Date : WK14.46
|
|
# Operation : Migration
|
|
# Purpose : For MTK Emulator HW GPU
|
|
allow bootanim qemu_pipe_device:chr_file rw_file_perms;
|
|
|
|
# Date : WK16.33
|
|
# Purpose: Allow to access ged for gralloc_extra functions
|
|
allow bootanim proc_ged:file {open read write ioctl getattr};
|
|
|
|
# Date : WK17.43
|
|
# Operation : Migration
|
|
# Purpose : For MTK perfmgr
|
|
allow bootanim proc_perfmgr:dir {search read};
|
|
allow bootanim proc_perfmgr:file {open read ioctl};
|