diff options
| -rw-r--r-- | non_plat/aee_core_forwarder.te | 4 | ||||
| -rw-r--r-- | non_plat/crash_dump.te | 2 | ||||
| -rw-r--r-- | non_plat/file.te | 2 | ||||
| -rw-r--r-- | r_non_plat/aee_core_forwarder.te | 4 |
4 files changed, 7 insertions, 5 deletions
diff --git a/non_plat/aee_core_forwarder.te b/non_plat/aee_core_forwarder.te index 43e97fe..6bba652 100644 --- a/non_plat/aee_core_forwarder.te +++ b/non_plat/aee_core_forwarder.te @@ -5,8 +5,8 @@ # MTK Policy Rule # ============================================== -allow aee_core_forwarder aee_exp_data_file:dir { write add_name search }; -allow aee_core_forwarder aee_exp_data_file:file { write create open getattr }; +allow aee_core_forwarder aee_exp_data_file:dir rw_dir_perms; +allow aee_core_forwarder aee_exp_data_file:file create_file_perms; get_prop(aee_core_forwarder, hwservicemanager_prop) # Date: 2019/06/14 diff --git a/non_plat/crash_dump.te b/non_plat/crash_dump.te new file mode 100644 index 0000000..0b10ad5 --- /dev/null +++ b/non_plat/crash_dump.te @@ -0,0 +1,2 @@ +allow crash_dump aee_exp_data_file:file rw_file_perms; +allow crash_dump aee_exp_data_file:dir r_dir_perms; diff --git a/non_plat/file.te b/non_plat/file.te index dd2a1ab..d4b6030 100644 --- a/non_plat/file.te +++ b/non_plat/file.te @@ -128,7 +128,7 @@ type aee_core_data_file, file_type, data_file_type, core_data_file_type; type aee_core_vendor_file, file_type, data_file_type; # AEE exp -type aee_exp_data_file, file_type, data_file_type, core_data_file_type; +type aee_exp_data_file, file_type, data_file_type, core_data_file_type, mlstrustedobject; type aee_exp_vendor_file, file_type, data_file_type; type aee_dumpsys_data_file, file_type, data_file_type, core_data_file_type; type aee_dumpsys_vendor_file, file_type, data_file_type; diff --git a/r_non_plat/aee_core_forwarder.te b/r_non_plat/aee_core_forwarder.te index 43e97fe..6bba652 100644 --- a/r_non_plat/aee_core_forwarder.te +++ b/r_non_plat/aee_core_forwarder.te @@ -5,8 +5,8 @@ # MTK Policy Rule # ============================================== -allow aee_core_forwarder aee_exp_data_file:dir { write add_name search }; -allow aee_core_forwarder aee_exp_data_file:file { write create open getattr }; +allow aee_core_forwarder aee_exp_data_file:dir rw_dir_perms; +allow aee_core_forwarder aee_exp_data_file:file create_file_perms; get_prop(aee_core_forwarder, hwservicemanager_prop) # Date: 2019/06/14 |