[Detail] New sepolicy path declared and also support legacy android. MTK-Commit-Id: 8982268bbef8f852c153428f1a5f83849953c7c2 Change-Id: Ic10f297a312ff2e89e44a0aa323ffa11bc78ff6e CR-Id: ALPS04767749 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
39 lines
1.1 KiB
Plaintext
39 lines
1.1 KiB
Plaintext
# ==============================================
|
|
# Policy File of /vendor/bin/resize_xxx Executable File
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
type resize, domain;
|
|
type resize_exec, exec_type, file_type, vendor_file_type;
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
|
|
# Date : WK15.30
|
|
# Operation : Migration
|
|
# Purpose : resize fs(ext4) partition, only run once.
|
|
init_daemon_domain(resize)
|
|
|
|
allow resize resize_exec:file execute_no_trans;
|
|
|
|
# Inherit and use pty created by android_fork_execvp_ext().
|
|
allow resize devpts:chr_file { read write open getattr ioctl };
|
|
|
|
allow resize kmsg_device:chr_file { write open };
|
|
|
|
allow resize userdata_block_device:blk_file rw_file_perms;
|
|
|
|
allow resize block_device:dir search;
|
|
|
|
allow resize resize:capability sys_admin;
|
|
|
|
allow resize labeledfs:filesystem unmount;
|
|
|
|
allow resize property_socket:sock_file write;
|
|
|
|
allow resize init:unix_stream_socket connectto;
|
|
|
|
#allow resize system_file:file execute_no_trans;
|