Denial observed without this change: [ 12.751534] .(4)[396:logd.auditd]type=1400 audit(1610975739.088:638): avc: denied { open } for comm="epdg_wod" path="/dev/ccci_woa" dev="tmpfs" ino=12969 scontext=u:r:epdg_wod:s0 tcontext=u:object_r:ccci_device:s0 tclass=chr_file permissive=1 Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com> Change-Id: I67030c6bd86b5e71442b36c0ee8064d83b5b31ba
SELinux policy for MediaTek devices
Don't recurse into the platform makefiles. We don't care about them, and we
don't want to force a reset of BOARD_SEPOLICY_DIRS
.
If you want to use these policies, add a
include device/mediatek/sepolicy/sepolicy.mk
to your device's BoardConfig. It is highly recommended that in case you have
your own BOARD_SEPOLICY_DIRS
declaration, the inclusion happens before
those lines
Repository Details
This repository uses device/mediatek/wembley-sepolicy as base till 4769fb0d973bf079934054c6c5423ca06d67010a
.
After that Google's device-specific changes starts.
Till 4769fb0d973bf079934054c6c5423ca06d67010a
, this repository is similar to
the basic sepolicy repository provided by MediaTek to the OEMs.
Description
Languages
Makefile
100%