d1522f4166
[Detail] 1.Property new change neverallow coredomain from writing vendor properties (allow audioserver_28_0 audiohal_prop (property_service (set))) (allow audioserver_28_0 mtk_thermal_config_prop (property_service (set))) audio_hal property which prefix is af. use to audiodump. it will replace by the audio_prop which property prefix is vendor.af before, mtk_thermal_config_prop use to set powerhal. And we use it by HIDL now, so this permission can remove. [Solution] remove violate properties setting. MTK-Commit-Id: 2942812bb4a57655898d407f84162fbdae9c3fc9 Change-Id: I1a01ddd8b83fa7eb0c499f67400660b738e9b986 CR-Id: ALPS03902666 Feature: [Module]Native AudioFlinger
55 lines
1.5 KiB
Plaintext
55 lines
1.5 KiB
Plaintext
# ==============================================
|
|
# MTK Policy Rule for vendor
|
|
# ==============================================
|
|
|
|
# Date: WK14.44
|
|
# Operation : Migration
|
|
# Purpose : EVDO
|
|
allow audioserver rpc_socket:sock_file write;
|
|
allow audioserver ttySDIO_device:chr_file rw_file_perms;
|
|
|
|
# Data: WK14.44
|
|
# Operation : Migration
|
|
# Purpose : for low SD card latency issue
|
|
allow audioserver sysfs_lowmemorykiller:file { read open };
|
|
|
|
# Data: WK14.45
|
|
# Operation : Migration
|
|
# Purpose : for change thermal policy when needed
|
|
allow audioserver proc_mtkcooler:dir search;
|
|
allow audioserver proc_mtktz:dir search;
|
|
allow audioserver proc_thermal:dir search;
|
|
|
|
# Date : WK15.03
|
|
# Operation : Migration
|
|
# Purpose : offloadservice
|
|
allow audioserver offloadservice_device:chr_file rw_file_perms;
|
|
|
|
# Date : WK16.17
|
|
# Operation : Migration
|
|
# Purpose: read/open sysfs node
|
|
allow audioserver sysfs_ccci:file r_file_perms;
|
|
|
|
# Date : WK16.18
|
|
# Operation : Migration
|
|
# Purpose: research root dir "/"
|
|
allow audioserver tmpfs:dir search;
|
|
|
|
# Date : WK16.18
|
|
# Operation : Migration
|
|
# Purpose: access sysfs node
|
|
#allow audioserver sysfs:file { open read write };
|
|
allow audioserver sysfs_ccci:dir search;
|
|
|
|
# Purpose: Dump debug info
|
|
allow audioserver debugfs_binder:dir search;
|
|
allow audioserver fuse:file write;
|
|
|
|
# Date : WK16.33
|
|
# Purpose: Allow to access ged for gralloc_extra functions
|
|
allow audioserver proc_ged:file {open read write ioctl getattr};
|
|
|
|
# Date : WK16.48
|
|
# Purpose: Allow to trigger AEE dump
|
|
allow audioserver aee_aed:unix_stream_socket connectto;
|