78d7f51370
[Detail] System processes have no permission to access vendor_default_prop [Solution] Add get vendor_default_prop rule for system processes MTK-Commit-Id: 412119fb578fc32e9f046c09a13817cf3c755515 Change-Id: I791997e6bb44c61b69d32c6da0cc80c6f2a9759e CR-Id: ALPS03825066 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
71 lines
2.0 KiB
Plaintext
71 lines
2.0 KiB
Plaintext
# ==============================================
|
|
# MTK Policy Rule for vendor
|
|
# ==============================================
|
|
|
|
# Data : WK14.39
|
|
# Operation : Migration
|
|
# Purpose : dump for debug
|
|
allow audioserver audiohal_prop:property_service set;
|
|
|
|
# Date: WK14.44
|
|
# Operation : Migration
|
|
# Purpose : EVDO
|
|
allow audioserver rpc_socket:sock_file write;
|
|
allow audioserver ttySDIO_device:chr_file rw_file_perms;
|
|
|
|
# Data: WK14.44
|
|
# Operation : Migration
|
|
# Purpose : for low SD card latency issue
|
|
allow audioserver sysfs_lowmemorykiller:file { read open };
|
|
|
|
# Data: WK14.45
|
|
# Operation : Migration
|
|
# Purpose : for change thermal policy when needed
|
|
allow audioserver proc_mtkcooler:dir search;
|
|
allow audioserver proc_mtktz:dir search;
|
|
allow audioserver proc_thermal:dir search;
|
|
|
|
# Date : WK15.03
|
|
# Operation : Migration
|
|
# Purpose : offloadservice
|
|
allow audioserver offloadservice_device:chr_file rw_file_perms;
|
|
|
|
# Date : WK16.17
|
|
# Operation : Migration
|
|
# Purpose: read/open sysfs node
|
|
allow audioserver sysfs_ccci:file r_file_perms;
|
|
|
|
# Date : WK16.18
|
|
# Operation : Migration
|
|
# Purpose: research root dir "/"
|
|
allow audioserver tmpfs:dir search;
|
|
|
|
# Date : WK16.18
|
|
# Operation : Migration
|
|
# Purpose: access sysfs node
|
|
#allow audioserver sysfs:file { open read write };
|
|
allow audioserver sysfs_ccci:dir search;
|
|
|
|
# Purpose: Dump debug info
|
|
allow audioserver debugfs_binder:dir search;
|
|
allow audioserver fuse:file write;
|
|
|
|
# Date : WK16.33
|
|
# Purpose: Allow to access ged for gralloc_extra functions
|
|
allow audioserver proc_ged:file {open read write ioctl getattr};
|
|
|
|
# Date : WK16.48
|
|
# Purpose: Allow to trigger AEE dump
|
|
allow audioserver aee_aed:unix_stream_socket connectto;
|
|
|
|
# Date : WK17.28
|
|
# Operation : MT6757 SQC
|
|
# Purpose : Change thermal config
|
|
allow audioserver mtk_thermal_config_prop:file { getattr open read };
|
|
allow audioserver mtk_thermal_config_prop:property_service set;
|
|
|
|
# Date : WK18.20
|
|
# Operation : Migration
|
|
# Purpose : no permission for vendor_default_prop
|
|
get_prop(audioserver, vendor_default_prop)
|