aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/sbchk.te
diff options
context:
space:
mode:
authorJan Engelmohr <jan.engelmohr@mailbox.tu-dresden.de>2016-08-16 00:02:57 +0200
committerJan Engelmohr <jan.engelmohr@mailbox.tu-dresden.de>2016-08-16 00:02:57 +0200
commit27d23ae4b8ba7e4bbd34a06f8c2e17ac8fa535bf (patch)
treeddad3e769e79b3222c61bb0f0e208c9993ca378f /sepolicy/sbchk.te
set up mt6753 device tree
Diffstat (limited to 'sepolicy/sbchk.te')
-rwxr-xr-xsepolicy/sbchk.te25
1 files changed, 25 insertions, 0 deletions
diff --git a/sepolicy/sbchk.te b/sepolicy/sbchk.te
new file mode 100755
index 0000000..6824e92
--- /dev/null
+++ b/sepolicy/sbchk.te
@@ -0,0 +1,25 @@
+# ==============================================
+# Policy File of /system/bin/sbchk Executable File
+
+# ==============================================
+# Type Declaration
+# ==============================================
+type sbchk, domain;
+type sbchk_exec, exec_type, file_type;
+
+# ==============================================
+# MTK Policy Rule
+# ==============================================
+init_daemon_domain(sbchk)
+
+# Date WK14.46
+# Operation : Migration
+# Purpose : for security driver access
+allow sbchk misc_sd_device:chr_file { read open };
+allow sbchk platformblk_device:blk_file { read write open };
+allow sbchk platformblk_device:dir search;
+allow sbchk preloader_device:chr_file { read open };
+allow sbchk sec_device:chr_file { read ioctl open };
+allow sbchk seccfg_device:chr_file { read write open };
+allow sbchk sec_ro_device:chr_file { open read };
+allow sbchk block_device:dir search;