[Detail] There is a workaround for bring-up, now it needs to be modified. [Solution] 1.Split workaround to sepcial *.te 2.Modify ged sepolicy 3.Modify mistake 4.Add sepolicy MTK-Commit-Id: 5a2b7e3fdc826a7ca6bc70a3810f14c1661e7d79 Change-Id: I0894de45e014a5eae754e35b57fbc9b21bc4bf90 CR-Id: ALPS04639771 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
33 lines
984 B
Plaintext
33 lines
984 B
Plaintext
# ==============================================
|
|
# Policy File of /system/bin/wmt_loader Executable File
|
|
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
type wmt_loader ,domain;
|
|
type wmt_loader_exec , exec_type, file_type, vendor_file_type;
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
init_daemon_domain(wmt_loader)
|
|
|
|
allow wmt_loader self:capability chown;
|
|
|
|
# Set the property
|
|
set_prop(wmt_loader, wmt_prop)
|
|
|
|
# add ioctl/open/read/write permission for wmt_loader with /dev/wmtdetect
|
|
allow wmt_loader wmtdetect_device:chr_file rw_file_perms;
|
|
|
|
# add ioctl/open/read/write permission for wmt_loader with /dev/stpwm
|
|
allow wmt_loader stpwmt_device:chr_file rw_file_perms;
|
|
allow wmt_loader devpts:chr_file rwx_file_perms;
|
|
|
|
allow wmt_loader proc:file setattr;
|
|
|
|
# Date: 2019/06/14
|
|
# Operation : Migration
|
|
allow wmt_loader proc_wmtdbg:file setattr;
|