61d7044c46
[Detail] New sepolicy path declared and also support legacy android. MTK-Commit-Id: 8982268bbef8f852c153428f1a5f83849953c7c2 Change-Id: Ic10f297a312ff2e89e44a0aa323ffa11bc78ff6e CR-Id: ALPS04767749 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
14 lines
844 B
Plaintext
14 lines
844 B
Plaintext
# Add for bootctl
|
|
#============= hal_bootctl_default ==============
|
|
allow hal_bootctl_default para_block_device:blk_file { read open write};
|
|
allow hal_bootctl_default rootfs:file { read getattr open };
|
|
allow hal_bootctl_default sysfs:dir { read open };
|
|
allow hal_bootctl_default sysfs_boot_type:file { read open };
|
|
allow hal_bootctl_default block_device:dir search;
|
|
allow hal_bootctl_default misc_sd_device:chr_file rw_file_perms;
|
|
allow hal_bootctl_default bootdevice_block_device:blk_file rw_file_perms;
|
|
allowxperm hal_bootctl_default bootdevice_block_device:blk_file ioctl MMC_IOCTLCMD;
|
|
allowxperm hal_bootctl_default bootdevice_block_device:blk_file ioctl UFS_IOCTLCMD;
|
|
allow hal_bootctl_default proc_cmdline:file r_file_perms;
|
|
allow hal_bootctl_default sysfs_boot_type:file r_file_perms;
|
|
allow hal_bootctl_default self:capability sys_rawio; |