62cf1a413a
[Detail] There is a workaround for bring-up, now it needs to be modified. [Solution] 1.Split workaround to sepcial *.te 2.Modify ged sepolicy 3.Modify mistake 4.Add sepolicy MTK-Commit-Id: 5a2b7e3fdc826a7ca6bc70a3810f14c1661e7d79 Change-Id: I0894de45e014a5eae754e35b57fbc9b21bc4bf90 CR-Id: ALPS04639771 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
44 lines
1.2 KiB
Plaintext
44 lines
1.2 KiB
Plaintext
# ==============================================
|
|
# MTK Policy Rule
|
|
# ============
|
|
|
|
# Date : WK16.33
|
|
# Purpose: Allow to access ged for gralloc_extra functions
|
|
allow appdomain proc_ged:file rw_file_perms;
|
|
allowxperm appdomain proc_ged:file ioctl { proc_ged_ioctls };
|
|
|
|
# Date : W16.42
|
|
# Operation : Integration
|
|
# Purpose : DRM / DRI GPU driver required
|
|
allow appdomain gpu_device:dir search;
|
|
|
|
# Date : W17.30
|
|
# Purpose : Allow MDP user access cmdq driver
|
|
allow appdomain mtk_cmdq_device:chr_file {open read ioctl};
|
|
|
|
# Date : W17.41
|
|
# Operation: SQC
|
|
# Purpose : Allow HWUI to access perfmgr
|
|
allow appdomain proc_perfmgr:dir search;
|
|
allow appdomain proc_perfmgr:file { getattr open read ioctl};
|
|
allowxperm appdomain proc_perfmgr:file ioctl {
|
|
PERFMGR_FPSGO_QUEUE
|
|
PERFMGR_FPSGO_DEQUEUE
|
|
PERFMGR_FPSGO_QUEUE_CONNECT
|
|
PERFMGR_FPSGO_BQID
|
|
};
|
|
|
|
# Date : W19.4
|
|
# Purpose : Allow MDP user access mdp driver
|
|
allow appdomain mdp_device:chr_file rw_file_perms;
|
|
|
|
# Date : W19.23
|
|
# Operation : Migration
|
|
# Purpose : For platform app com.android.gallery3d
|
|
allow { appdomain -isolated_app } radio_data_file:file rw_file_perms;
|
|
|
|
# Date : W19.23
|
|
# Operation : Migration
|
|
# Purpose : For app com.tencent.qqpimsecure
|
|
allowxperm appdomain appdomain:fifo_file ioctl SNDCTL_TMR_START;
|