sepolicy/init.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

# ==============================================
# MTK Policy Rule
# ============

# Date : WK14.34
# Operation : Migration 
# Purpose : for L early bring up: add for nvram command in init rc files
allow init nvram_data_file:dir { write search setattr read create open add_name };
allow init nvdata_file:dir { write search setattr read create open add_name };

#============= init ==============
# Date : W14.42
# Operation : Migration
# Purpose : for L : add for partition
allow init platformblk_device:blk_file setattr;

# Date : W14.43
# Operation : Migration
# Purpose : for L : add for ape playback

allow init MtkCodecService_exec:file execute_no_trans;

# fingerprint, silead
allow init shell_data_file:file { read write };
allow init shell_data_file:dir write;
allow init shell_data_file:dir add_name;
allow init shell_data_file:file create;
allow init shell_data_file:file open;