diff options
| author | mtk33297 <anuj.agarwal@mediatek.com> | 2019-01-31 13:59:32 +0800 |
|---|---|---|
| committer | mtk33297 <anuj.agarwal@mediatek.com> | 2019-01-31 13:59:32 +0800 |
| commit | 5367cc6510a9a8f74216576e84c0b8356f12a636 (patch) | |
| tree | c3c05d323fa5e8012757d42e23b04437a74dcba7 /prebuilts | |
| parent | 8b0010b096ed7ce1647aa29187ac6c6d5869b22e (diff) | |
| download | wembley-sepolicy-5367cc6510a9a8f74216576e84c0b8356f12a636.tar.gz | |
[ALPS02333452] Android p selinux change
[Detail]
Android has defined neverallow rules
to restrict direct access to system files.
We need to have a custom label for each policy.
[Solution]
Define custom label for drmserver
MTK-Commit-Id: 996de9ff486db13908f6d58b476613957d4f336d
Change-Id: I34c8d86c1baf9daa02e29323007e4136c6048b31
CR-Id: ALPS02333452
Feature: OMA DRM V1.0
Diffstat (limited to 'prebuilts')
| -rwxr-xr-x | prebuilts/api/26.0/plat_private/drmserver.te | 2 | ||||
| -rwxr-xr-x | prebuilts/api/26.0/plat_private/file.te | 6 | ||||
| -rwxr-xr-x | prebuilts/api/26.0/plat_private/file_contexts | 2 |
3 files changed, 9 insertions, 1 deletions
diff --git a/prebuilts/api/26.0/plat_private/drmserver.te b/prebuilts/api/26.0/plat_private/drmserver.te index 7c727e8..425240f 100755 --- a/prebuilts/api/26.0/plat_private/drmserver.te +++ b/prebuilts/api/26.0/plat_private/drmserver.te @@ -3,4 +3,4 @@ # ====================== # =======drmserver====== -#allow drmserver sysfs:file { read open }; +allow drmserver access_sys_file:file { read open }; diff --git a/prebuilts/api/26.0/plat_private/file.te b/prebuilts/api/26.0/plat_private/file.te new file mode 100755 index 0000000..e1d7a89 --- /dev/null +++ b/prebuilts/api/26.0/plat_private/file.te @@ -0,0 +1,6 @@ +# ==============================================
+# MTK Policy Rule
+# ==============================================
+
+# For drmserver
+type access_sys_file, fs_type, sysfs_type;
\ No newline at end of file diff --git a/prebuilts/api/26.0/plat_private/file_contexts b/prebuilts/api/26.0/plat_private/file_contexts index 49367d7..1a13a11 100755 --- a/prebuilts/api/26.0/plat_private/file_contexts +++ b/prebuilts/api/26.0/plat_private/file_contexts @@ -37,3 +37,5 @@ # it is used to mount all storages in meta/factory mode /system/bin/storagemanagerd u:object_r:storagemanagerd_exec:s0 +# For drmserver +/sys/block/mmcblk0rpmb/size u:object_r:access_sys_file:s0
\ No newline at end of file |