78d7f51370
[Detail] System processes have no permission to access vendor_default_prop [Solution] Add get vendor_default_prop rule for system processes MTK-Commit-Id: 412119fb578fc32e9f046c09a13817cf3c755515 Change-Id: I791997e6bb44c61b69d32c6da0cc80c6f2a9759e CR-Id: ALPS03825066 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
25 lines
1001 B
Plaintext
25 lines
1001 B
Plaintext
# ==============================================
|
|
# MTK Policy Rule
|
|
# ============
|
|
|
|
|
|
# Data : 2015/01/14
|
|
# Operation : MT6735 SQC bug fix
|
|
# Purpose : ALPS01905960 - selinux_warning: audit(1420845354.752:91): avc: denied { search }
|
|
# for pid=194 comm="lmkd" name="23573" dev="proc"
|
|
# ino=915740 scontext=u:r:lmkd:s0 tcontext=u:r:zygote:s0 tclass=dir permissive=0
|
|
dontaudit lmkd zygote:dir rw_dir_perms;
|
|
|
|
# Data : 2015/04/17
|
|
# Operation : tb8163p1 low memory selinux warning
|
|
# Purpose : ALPS02038466 audit(1429079840.646:7): avc: denied { use }
|
|
# for pid=170 comm="lmkd"
|
|
# path=2F6465762F6173686D656D2F4469736361726461626C654D656D6F72794173686D656D416C6C6F6361746F72202864656C6574656429
|
|
# dev="tmpfs" ino=14475 scontext=u:r:lmkd:s0 tcontext=u:r:platform_app:s0 tclass=fd permissive=0
|
|
dontaudit lmkd platform_app:fd use;
|
|
|
|
# Date : WK18.20
|
|
# Operation : Migration
|
|
# Purpose : no permission for vendor_default_prop
|
|
get_prop(lmkd, vendor_default_prop)
|