5849c224e3
1. Mark polices which accessing proc/sysfs file system
2. Add violator attribute to modules violate vendor/system rule.
MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8
Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
18 lines
548 B
Plaintext
18 lines
548 B
Plaintext
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
|
|
# Date : WK16.33
|
|
# Purpose: Allow to access ged for gralloc_extra functions
|
|
#allow zygote proc_ged:file {open read write ioctl getattr};
|
|
|
|
# Date : WK17.02
|
|
# Purpose: Allow to access gpu for memtrack functions
|
|
allow zygote gpu_device:dir search;
|
|
allow zygote gpu_device:chr_file { open read write ioctl getattr};
|
|
|
|
# Date : WK17.32
|
|
# Operation : O Migration
|
|
# Purpose: Allow to access property
|
|
get_prop(zygote, graphics_config_prop)
|