Aayush Gupta c076d39750 non_plat: Allow proc_perfmgr to associate with proc filesystem
Denial observed without this change:
[    7.887820] .(1)[396:logd.auditd]type=1400 audit(1610975734.228:4): avc: denied { associate } for comm="init" name="boot_boost" scontext=u:object_r:proc_perfmgr:s0 tcontext=u:object_r:proc:s0 tclass=filesystem permissive=1

Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: I2adca2f377a825840f63643132a064c9c1394b06
2021-01-18 21:47:31 +05:30
2020-01-18 10:10:42 +08:00

SELinux policy for MediaTek devices

Don't recurse into the platform makefiles. We don't care about them, and we don't want to force a reset of BOARD_SEPOLICY_DIRS.

If you want to use these policies, add a

include device/mediatek/sepolicy/sepolicy.mk

to your device's BoardConfig. It is highly recommended that in case you have your own BOARD_SEPOLICY_DIRS declaration, the inclusion happens before those lines

Repository Details

This repository uses device/mediatek/wembley-sepolicy as base till 4769fb0d973bf079934054c6c5423ca06d67010a. After that Google's device-specific changes starts.

Till 4769fb0d973bf079934054c6c5423ca06d67010a, this repository is similar to the basic sepolicy repository provided by MediaTek to the OEMs.

Description
No description provided
Readme 1.4 MiB
Languages
Makefile 100%