android_device_mediatek_sep.../non_plat/hal_bootctl_default.te
Seiya Wang cfa7fc2798 Merge "[ALPS04361666] hal_bootctl_default: add permission" into alps-trunk-q0.basic
Change-Id: Ib1679b854be96342c041b267d961bff687fdf058
MTK-Commit-Id: 43f805c7e7377791900f451efb0e1683d1ef8f80
2020-01-18 10:14:06 +08:00

14 lines
844 B
Plaintext

# Add for bootctl
#============= hal_bootctl_default ==============
allow hal_bootctl_default para_block_device:blk_file { read open write};
allow hal_bootctl_default rootfs:file { read getattr open };
allow hal_bootctl_default sysfs:dir { read open };
allow hal_bootctl_default sysfs_boot_type:file { read open };
allow hal_bootctl_default block_device:dir search;
allow hal_bootctl_default misc_sd_device:chr_file rw_file_perms;
allow hal_bootctl_default bootdevice_block_device:blk_file rw_file_perms;
allowxperm hal_bootctl_default bootdevice_block_device:blk_file ioctl MMC_IOCTLCMD;
allowxperm hal_bootctl_default bootdevice_block_device:blk_file ioctl UFS_IOCTLCMD;
allow hal_bootctl_default proc_cmdline:file r_file_perms;
allow hal_bootctl_default sysfs_boot_type:file r_file_perms;
allow hal_bootctl_default self:capability sys_rawio;