diff options
| author | Shanshan Guo <Shanshan.Guo@mediatek.com> | 2020-03-16 16:32:46 +0800 |
|---|---|---|
| committer | Greg Kaiser <gkaiser@google.com> | 2021-08-24 11:00:28 -0700 |
| commit | 76ca07ddf4c64734ef3f873be0ff94a1ff7d3ae4 (patch) | |
| tree | dcf07c993d455a1a0f888c960e2427037884c06f | |
| parent | 2fd7bfd706469663515ec8970e966e9ba5c17c94 (diff) | |
| download | device_mediatek_wembley-sepolicy-76ca07ddf4c64734ef3f873be0ff94a1ff7d3ae4.tar.gz device_mediatek_wembley-sepolicy-76ca07ddf4c64734ef3f873be0ff94a1ff7d3ae4.tar.bz2 device_mediatek_wembley-sepolicy-76ca07ddf4c64734ef3f873be0ff94a1ff7d3ae4.zip | |
SEPolicy: Add context for /dev/radio
[Detail]
Do not allow access to the generic device label. This is too broad.
Instead, if access to part of device is desired, it should have a
more specific label.
[Solution]
Add context for dev/radio .
Merged-In: If97bc5bb23fabad7f62efcdbda3a3fa0ba7ec307
Change-Id: I51c16762a0fcafa90ad30d7a8849ae2f8c241ed1
CR-Id: ALPS05047061
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
| -rw-r--r-- | non_plat/device.te | 1 | ||||
| -rw-r--r-- | non_plat/file_contexts | 3 |
2 files changed, 2 insertions, 2 deletions
diff --git a/non_plat/device.te b/non_plat/device.te index 2e6ceab..4c3dbd0 100644 --- a/non_plat/device.te +++ b/non_plat/device.te @@ -233,6 +233,7 @@ type mdp_device, dev_type; type mrdump_device, dev_type; type kb_block_device,dev_type; type dkb_block_device,dev_type; +type mtk_radio_device, dev_type; ########################## # Sensor common Devices Start diff --git a/non_plat/file_contexts b/non_plat/file_contexts index 4a47925..b437d2d 100644 --- a/non_plat/file_contexts +++ b/non_plat/file_contexts @@ -377,6 +377,7 @@ /dev/nebula-ipc-dev0 u:object_r:tee_device:s0 /dev/mbim u:object_r:mbim_device:s0 /dev/alarm(/.*)? u:object_r:alarm_device:s0 +/dev/radio(/.*)? u:object_r:mtk_radio_device:s0 ########################## # Sensor common Devices Start # @@ -680,10 +681,8 @@ /vendor/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0 /vendor/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service-lazy\.clearkey u:object_r:hal_drm_clearkey_exec:s0 - # Date : 2019/10/28 # Purpose : move these contexts from plat_private/file_contexts /(system\/vendor|vendor)/bin/aee_aedv u:object_r:aee_aedv_exec:s0 /(system\/vendor|vendor)/bin/aee_aedv64 u:object_r:aee_aedv_exec:s0 /vendor/bin/aeev u:object_r:aee_aedv_exec:s0 - |