Eve 47c1e6591c [ALPS04421363] add untrusted app selinux policy
add selinux policy for app so that the video will not be green

MTK-Commit-Id: 10d2bab36c7cb7ecfda381975ff33621b7a03f5d

Change-Id: I76cd1036b1819c05f78ba1177ff201bc8dfab9bd
CR-Id: ALPS04421363
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:11:29 +08:00

36 lines
1.3 KiB
Plaintext

# ==============================================
# MTK Policy Rule
# ==============================================
# TODO:: Security Issue.
# Date: 2016/02/26
# Operation: Migration
# Purpose: Allow MTK modified ElephantStress and WhatsTemp to read thermal zone temperatures
# from MTK kernel modules for thermal tests at OEM/ODM.
allow untrusted_app proc_mtktz:dir search;
allow untrusted_app proc_mtktz:file r_file_perms;
# Date : 2017/08/01
# Operation: SQC
# Purpose : Allow Whatstemp, a MTK thermal logging tool, to log thermal related information
# properly for thermal tests at OEM/ODM.
allow untrusted_app_25 proc_mtktz:dir search;
allow untrusted_app_25 proc_mtktz:file { getattr open read };
allow untrusted_app_25 proc_thermal:dir search;
allow untrusted_app_25 proc_thermal:file { getattr open read };
allow untrusted_app_25 sysfs_fps:dir search;
allow untrusted_app_25 sysfs_fps:file { getattr open read };
allow untrusted_app_25 sysfs_batteryinfo:dir search;
#allow untrusted_app_25 sysfs_batteryinfo:file { getattr open read };
allow untrusted_app_25 sysfs_therm:dir { open read search };
allow untrusted_app_25 sysfs_therm:file { getattr open read };
allowxperm untrusted_app_25 proc_ged:file ioctl {
GED_BRIDGE_IO_GE_GET
GED_BRIDGE_IO_MONITOR_3D_FENCE
GED_BRIDGE_IO_GE_SET
GED_BRIDGE_IO_QUERY_INFO
GED_BRIDGE_IO_GE_ALLOC
};