diff options
author | xiao.liu <xiao.liu@mediatek.com> | 2019-10-22 11:46:55 +0800 |
---|---|---|
committer | Xiao.Liu <xiao.liu@mediatek.com> | 2019-10-23 15:00:58 +0800 |
commit | 0476e00269accaf247550928cc72c010f99787c1 (patch) | |
tree | 80ea59f9f3bc14adc964b68dccb97c9a7b60fa37 /non_plat | |
parent | fac8a7d0dec7f3316c1127928a564e2b0009313e (diff) | |
download | device_mediatek_wembley-sepolicy-0476e00269accaf247550928cc72c010f99787c1.tar.gz device_mediatek_wembley-sepolicy-0476e00269accaf247550928cc72c010f99787c1.tar.bz2 device_mediatek_wembley-sepolicy-0476e00269accaf247550928cc72c010f99787c1.zip |
[ALPS04840835] Remove all vendor sepolicy for fastbootd
[Solution]
1. remove sepolicy for native partition erase permission
2. remove AB partition sepolicy, leave it to Google solution
Change-Id: I67ab4363307a69b5a94a0242c12750bc94670344
CR-Id: ALPS04840835
Feature: [Android Default] Fastboot
Diffstat (limited to 'non_plat')
-rw-r--r-- | non_plat/fastbootd.te | 38 |
1 files changed, 19 insertions, 19 deletions
diff --git a/non_plat/fastbootd.te b/non_plat/fastbootd.te index cb6708d..9e273ab 100644 --- a/non_plat/fastbootd.te +++ b/non_plat/fastbootd.te @@ -1,25 +1,25 @@ # fastbootd (used in recovery init.rc for /sbin/fastbootd) -allow fastbootd { - bootdevice_block_device - cache_block_device - logo_block_device - para_block_device - }:blk_file { rw_file_perms }; +#allow fastbootd { +# bootdevice_block_device +# cache_block_device +# logo_block_device +# para_block_device +# }:blk_file { rw_file_perms }; -allow fastbootd { - sysfs_boot_type -}:file { rw_file_perms }; +#allow fastbootd { +# sysfs_boot_type +#}:file { rw_file_perms }; -allowxperm fastbootd { - bootdevice_block_device - cache_block_device - logo_block_device - para_block_device - }:blk_file ioctl { - BLKSECDISCARD - BLKDISCARD - MMC_IOCTLCMD - }; +#allowxperm fastbootd { +# bootdevice_block_device +# cache_block_device +# logo_block_device +# para_block_device +# }:blk_file ioctl { +# BLKSECDISCARD +# BLKDISCARD +# MMC_IOCTLCMD +# }; |