diff options
| author | Shanshan Guo <Shanshan.Guo@mediatek.com> | 2019-10-23 16:35:42 +0800 |
|---|---|---|
| committer | Shanshan Guo <shanshan.guo@mediatek.com> | 2019-10-25 09:49:59 +0800 |
| commit | 84d8e9654281e4f7ee8a602e91084c320feff658 (patch) | |
| tree | d11a0cf5ca9ddb42094801442a19a6965c7e1168 | |
| parent | 8f8e5faded18d6bcee1eb96dba37a2d708f3995f (diff) | |
| download | device_mediatek_wembley-sepolicy-84d8e9654281e4f7ee8a602e91084c320feff658.tar.gz device_mediatek_wembley-sepolicy-84d8e9654281e4f7ee8a602e91084c320feff658.tar.bz2 device_mediatek_wembley-sepolicy-84d8e9654281e4f7ee8a602e91084c320feff658.zip | |
[ALPS04833608] SEPolicy: Add specail SELabel for /proc/chip
[Detail]
It has risk for allow process to get permission of /proc/chip by
using u:object_r:proc:s0
To avoid that, need to Add specail SELabel for /proc/chip
[Solution]
Add specail SELabel for /proc/chip
Change-Id: Ia6d4be26491fa11f81734cbb80b0b98b2b88f64a
CR-Id: ALPS04833608
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
| -rw-r--r-- | non_plat/genfs_contexts | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/non_plat/genfs_contexts b/non_plat/genfs_contexts index 65fc010..edf72ff 100644 --- a/non_plat/genfs_contexts +++ b/non_plat/genfs_contexts @@ -28,8 +28,7 @@ genfscon proc /zraminfo u:object_r:proc_zraminfo:s0 genfscon proc /gpulog u:object_r:proc_gpulog:s0 genfscon proc /cpu/alignment u:object_r:proc_cpu_alignment:s0 genfscon proc /sched_debug u:object_r:proc_sched_debug:s0 -genfscon proc /chip/hw_ver u:object_r:proc_chip:s0 -genfscon proc /chip/info u:object_r:proc_chip:s0 +genfscon proc /chip u:object_r:proc_chip:s0 genfscon proc /atf_log u:object_r:proc_atf_log:s0 genfscon proc /gz_log u:object_r:proc_gz_log:s0 genfscon proc /last_kmsg u:object_r:proc_last_kmsg:s0 |