diff options
author | mtk11285 <weiwei.zhang@mediatek.com> | 2020-02-18 14:58:04 +0800 |
---|---|---|
committer | mtk11285 <weiwei.zhang@mediatek.com> | 2020-02-18 14:58:04 +0800 |
commit | 62292957338968e7a57a9376649d07faf138787a (patch) | |
tree | f8add292c28d2ce6302d9b5a8825a7f7f9b45a78 | |
parent | f9cbc919329c56a571ae50147eb314bacc476d59 (diff) | |
download | device_mediatek_wembley-sepolicy-62292957338968e7a57a9376649d07faf138787a.tar.gz device_mediatek_wembley-sepolicy-62292957338968e7a57a9376649d07faf138787a.tar.bz2 device_mediatek_wembley-sepolicy-62292957338968e7a57a9376649d07faf138787a.zip |
[ALPS04991295] create minicoredump/coredump fail
1. allow crash_dump to read/write /data/aee_exp
2. add mlstrustedobject attribute
3. use rw_dir_perms/create_file_perms to replace open/write...
Change-Id: I05ec01fbf54d1d797675918c962dc0b5c3828755
CR-Id: ALPS04991295
Feature: Android Exception Engine(AEE)
-rw-r--r-- | non_plat/aee_core_forwarder.te | 4 | ||||
-rw-r--r-- | non_plat/crash_dump.te | 2 | ||||
-rw-r--r-- | non_plat/file.te | 2 | ||||
-rw-r--r-- | r_non_plat/aee_core_forwarder.te | 4 |
4 files changed, 7 insertions, 5 deletions
diff --git a/non_plat/aee_core_forwarder.te b/non_plat/aee_core_forwarder.te index 43e97fe..6bba652 100644 --- a/non_plat/aee_core_forwarder.te +++ b/non_plat/aee_core_forwarder.te @@ -5,8 +5,8 @@ # MTK Policy Rule # ============================================== -allow aee_core_forwarder aee_exp_data_file:dir { write add_name search }; -allow aee_core_forwarder aee_exp_data_file:file { write create open getattr }; +allow aee_core_forwarder aee_exp_data_file:dir rw_dir_perms; +allow aee_core_forwarder aee_exp_data_file:file create_file_perms; get_prop(aee_core_forwarder, hwservicemanager_prop) # Date: 2019/06/14 diff --git a/non_plat/crash_dump.te b/non_plat/crash_dump.te new file mode 100644 index 0000000..0b10ad5 --- /dev/null +++ b/non_plat/crash_dump.te @@ -0,0 +1,2 @@ +allow crash_dump aee_exp_data_file:file rw_file_perms; +allow crash_dump aee_exp_data_file:dir r_dir_perms; diff --git a/non_plat/file.te b/non_plat/file.te index dd2a1ab..d4b6030 100644 --- a/non_plat/file.te +++ b/non_plat/file.te @@ -128,7 +128,7 @@ type aee_core_data_file, file_type, data_file_type, core_data_file_type; type aee_core_vendor_file, file_type, data_file_type; # AEE exp -type aee_exp_data_file, file_type, data_file_type, core_data_file_type; +type aee_exp_data_file, file_type, data_file_type, core_data_file_type, mlstrustedobject; type aee_exp_vendor_file, file_type, data_file_type; type aee_dumpsys_data_file, file_type, data_file_type, core_data_file_type; type aee_dumpsys_vendor_file, file_type, data_file_type; diff --git a/r_non_plat/aee_core_forwarder.te b/r_non_plat/aee_core_forwarder.te index 43e97fe..6bba652 100644 --- a/r_non_plat/aee_core_forwarder.te +++ b/r_non_plat/aee_core_forwarder.te @@ -5,8 +5,8 @@ # MTK Policy Rule # ============================================== -allow aee_core_forwarder aee_exp_data_file:dir { write add_name search }; -allow aee_core_forwarder aee_exp_data_file:file { write create open getattr }; +allow aee_core_forwarder aee_exp_data_file:dir rw_dir_perms; +allow aee_core_forwarder aee_exp_data_file:file create_file_perms; get_prop(aee_core_forwarder, hwservicemanager_prop) # Date: 2019/06/14 |