c7ac9f171a
[Detail] 1.Google add new neverallow rule for untrusted apps 2.The file/dir in /proc must associate with proc_type [Solution] 1.Remove rules which violate google neverallow rules about untrusted apps 2.Add proc_type attribute for file/dir on /proc MTK-Commit-Id: b94412725e3a7b18db9573056c2fb43367989ed5 Change-Id: I89de16a65f05d052969c794604b9c372ed1ce7e1 CR-Id: ALPS03825066 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
35 lines
1.0 KiB
Plaintext
35 lines
1.0 KiB
Plaintext
# Date: WK1812
|
|
# Purpose: add for sensor calibration
|
|
allow em_svr als_ps_device:chr_file { read open ioctl };
|
|
allow em_svr gsensor_device:chr_file { read open ioctl };
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for MD log filter
|
|
allow em_svr md_block_device:blk_file { read open };
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for SIB capture
|
|
allow em_svr para_block_device:blk_file { read open };
|
|
allow em_svr proc_lk_env:file { read write ioctl open };
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for MSDC get/set
|
|
allow em_svr misc_sd_device:chr_file { read open ioctl };
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for battery log
|
|
allow em_svr proc_battery_cmd:dir { search };
|
|
allow em_svr proc_battery_cmd:file { create write open };
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for light/proximity sensor
|
|
#allow em_svr nvdata_file:dir { write open search read add_name };
|
|
#allow em_svr nvdata_file:file { getattr read write create open setattr };
|
|
allow em_svr nvram_device:blk_file { open read write };
|
|
|
|
# Date: WK1812
|
|
# Purpose: add for Gyroscope sensor
|
|
allow em_svr gyroscope_device:chr_file { read ioctl open };
|
|
|
|
|