diff options
| author | Tim Chang <tim.chang@mediatek.com> | 2020-02-12 12:47:24 +0800 |
|---|---|---|
| committer | Tim Chang <tim.chang@mediatek.com> | 2020-02-13 16:45:38 +0800 |
| commit | b922e328bd53e5fcfd6c508a405a52a6b18b6d9c (patch) | |
| tree | 9b81054210e232a1e3aead2383ac40a872d2fb9c | |
| parent | f3e98a545043f07987baa6e0d43780bcb87a88f3 (diff) | |
| download | wembley-sepolicy-b922e328bd53e5fcfd6c508a405a52a6b18b6d9c.tar.gz | |
[ALPS04949825] WMT: add sepolicy
Add policy for stp_dump3
Change-Id: Iea1fa6b8c1c25fb69cda010f7a449e5ea3ee109f
Signed-off-by: Tim Chang <tim.chang@mediatek.com>
CR-Id: ALPS04949825
Feature: [Module]WMT Driver
| -rw-r--r-- | non_plat/stp_dump3.te | 2 | ||||
| -rw-r--r-- | r_non_plat/stp_dump3.te | 2 |
2 files changed, 4 insertions, 0 deletions
diff --git a/non_plat/stp_dump3.te b/non_plat/stp_dump3.te index 6d0a65b..0501d29 100644 --- a/non_plat/stp_dump3.te +++ b/non_plat/stp_dump3.te @@ -30,12 +30,14 @@ allow stp_dump3 tmpfs:lnk_file read; allow stp_dump3 mnt_user_file:dir search; allow stp_dump3 mnt_user_file:lnk_file read; allow stp_dump3 storage_file:lnk_file read; +allow stp_dump3 storage_file:dir search; allow stp_dump3 sdcard_type:dir search; allow stp_dump3 sdcard_type:dir {open read write create setattr getattr add_name remove_name search}; allow stp_dump3 sdcard_type:file { open read write create setattr getattr append unlink rename}; allow stp_dump3 sdcard_type:file create_file_perms; allow stp_dump3 stp_dump_data_file:dir create_dir_perms; allow stp_dump3 stp_dump_data_file:file create_file_perms; +allow stp_dump3 stp_dump_data_file:sock_file { write create unlink setattr }; allow stp_dump3 connsyslog_data_vendor_file:dir create_dir_perms; allow stp_dump3 connsyslog_data_vendor_file:file create_file_perms; get_prop(stp_dump3, coredump_prop) diff --git a/r_non_plat/stp_dump3.te b/r_non_plat/stp_dump3.te index 6d0a65b..0501d29 100644 --- a/r_non_plat/stp_dump3.te +++ b/r_non_plat/stp_dump3.te @@ -30,12 +30,14 @@ allow stp_dump3 tmpfs:lnk_file read; allow stp_dump3 mnt_user_file:dir search; allow stp_dump3 mnt_user_file:lnk_file read; allow stp_dump3 storage_file:lnk_file read; +allow stp_dump3 storage_file:dir search; allow stp_dump3 sdcard_type:dir search; allow stp_dump3 sdcard_type:dir {open read write create setattr getattr add_name remove_name search}; allow stp_dump3 sdcard_type:file { open read write create setattr getattr append unlink rename}; allow stp_dump3 sdcard_type:file create_file_perms; allow stp_dump3 stp_dump_data_file:dir create_dir_perms; allow stp_dump3 stp_dump_data_file:file create_file_perms; +allow stp_dump3 stp_dump_data_file:sock_file { write create unlink setattr }; allow stp_dump3 connsyslog_data_vendor_file:dir create_dir_perms; allow stp_dump3 connsyslog_data_vendor_file:file create_file_perms; get_prop(stp_dump3, coredump_prop) |