5849c224e3
1. Mark polices which accessing proc/sysfs file system
2. Add violator attribute to modules violate vendor/system rule.
MTK-Commit-Id: 3954cad7a1428cda694d8428c2235a78aa6e7cc8
Change-Id: I401ae5b87eb9a03f324bef83c6678149606b15a8
CR-Id: ALPS03825066
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
15 lines
429 B
Plaintext
15 lines
429 B
Plaintext
# ==============================================
|
|
# MTK Policy Rule
|
|
# ============
|
|
|
|
# Date : WK14.40 2014/12/26
|
|
# Operation : CTS 5.0_r1
|
|
# Purpose : allow access to /data/data for full CTS
|
|
allow keystore app_data_file:file write;
|
|
|
|
# Date : WK17.30 2017/07/25
|
|
# Operation : keystore
|
|
# Purpose : Fix keystore boot selinux violation
|
|
#allow keystore debugfs_tracing:file write;
|
|
allow hal_keymaster_default debugfs_tracing:file write;
|