summaryrefslogtreecommitdiffstats
path: root/non_plat/system_server.te
diff options
context:
space:
mode:
authormtk07742 <yongjun.luo@mediatek.com>2019-10-30 21:25:20 +0800
committermtk07742 <yongjun.luo@mediatek.com>2019-10-30 21:25:20 +0800
commite6b2c39860f7cb83d54f1c01b9fe90969d8ede3b (patch)
treec1da372ad8cc3335222c4a69921cb4a046f328b9 /non_plat/system_server.te
parent8b60b4707b32707c8ada4ebc5effdb47627d00df (diff)
downloaddevice_mediatek_wembley-sepolicy-e6b2c39860f7cb83d54f1c01b9fe90969d8ede3b.tar.gz
device_mediatek_wembley-sepolicy-e6b2c39860f7cb83d54f1c01b9fe90969d8ede3b.tar.bz2
device_mediatek_wembley-sepolicy-e6b2c39860f7cb83d54f1c01b9fe90969d8ede3b.zip
[ALPS04855246] Add rules in system_server
Add search rule for proc_chip and setsched rule for zygote in system_server. Change-Id: If7fb47b1873a688b047a919eb726e18f4daadc19 CR-Id: ALPS04855246 Feature: [Module]SystemServer
Diffstat (limited to 'non_plat/system_server.te')
-rw-r--r--non_plat/system_server.te5
1 files changed, 5 insertions, 0 deletions
diff --git a/non_plat/system_server.te b/non_plat/system_server.te
index d132139..e183f50 100644
--- a/non_plat/system_server.te
+++ b/non_plat/system_server.te
@@ -264,3 +264,8 @@ dontaudit system_server sdcardfs:file r_file_perms;
# Operation : Q Migration
allow system_server mtk_hal_camera:process sigkill;
allow system_server kernel:system syslog_read;
+
+# Date : 2019/10/30
+# Operation : Q Migration
+allow system_server proc_chip:dir search;
+allow system_server zygote:process setsched;