summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorhua.tian <hua.tian@mediatek.com>2019-08-13 17:02:12 +0800
committerHua Tian (田华) <hua.tian@mediatek.com>2019-12-19 15:52:15 +0800
commit045f604c270b73a89d3435d533c208dcf469e157 (patch)
treefe66f98e4d619e6daad4f5738b3cf1b67a68ff48
parentdf9f4afc7ecdf7a62b3bd7b79de24d2cde4ebd6a (diff)
downloaddevice_mediatek_wembley-sepolicy-045f604c270b73a89d3435d533c208dcf469e157.tar.gz
device_mediatek_wembley-sepolicy-045f604c270b73a89d3435d533c208dcf469e157.tar.bz2
device_mediatek_wembley-sepolicy-045f604c270b73a89d3435d533c208dcf469e157.zip
[ALPS04940525] Add SELINUX rules
Add SELINUX rules to get boot mode. Change-Id: I670f3cadc07434f87da9800b9dc8cfdcf1b3fc09 CR-Id: ALPS04940525 Feature: Mobile Log Tool (cherry picked from commit 162ae039e4a97b47a21fb546deb935f0990babea)
-rw-r--r--plat_private/genfs_contexts1
-rw-r--r--plat_private/mobile_log_d.te2
-rw-r--r--plat_public/file.te2
3 files changed, 5 insertions, 0 deletions
diff --git a/plat_private/genfs_contexts b/plat_private/genfs_contexts
index fdf8565..7cfb555 100644
--- a/plat_private/genfs_contexts
+++ b/plat_private/genfs_contexts
@@ -3,3 +3,4 @@ genfscon sysfs /devices/platform/vibrator@0/leds/vibrator u:object_r:sysfs_vibra
genfscon sysfs /block/mmcblk0rpmb/size u:object_r:access_sys_file:s0
genfscon sysfs /devices/virtual/misc/mcupm u:object_r:sysfs_mcupm:s0
+genfscon sysfs /firmware/devicetree/base/chosen/atag,boot u:object_r:sysfs_boot_info:s0
diff --git a/plat_private/mobile_log_d.te b/plat_private/mobile_log_d.te
index 09c7b05..d6c9468 100644
--- a/plat_private/mobile_log_d.te
+++ b/plat_private/mobile_log_d.te
@@ -84,3 +84,5 @@ allow mobile_log_d debuglog_data_file:file create_file_perms;
allow mobile_log_d mcupm_device:chr_file r_file_perms;
allow mobile_log_d sysfs_mcupm:file w_file_perms;
allow mobile_log_d sysfs_mcupm:dir search;
+
+allow mobile_log_d sysfs_boot_info:file r_file_perms;
diff --git a/plat_public/file.te b/plat_public/file.te
index 0e572de..fcf55c9 100644
--- a/plat_public/file.te
+++ b/plat_public/file.te
@@ -4,3 +4,5 @@
# lbs debug file
type lbs_dbg_data_file, file_type, data_file_type, core_data_file_type;
+
+type sysfs_boot_info, fs_type, sysfs_type;