mirror of
https://github.com/Evolution-X-Devices/device_google_gs201
synced 2026-01-27 14:29:33 +00:00
fd31c0c64a
git-subtree-dir: sepolicy git-subtree-mainline:5cd89d8075git-subtree-split:4a08341deaChange-Id: I48384ddf513f6de75e77a5c55ff848498a5e88b6
35 lines
1.8 KiB
Plaintext
35 lines
1.8 KiB
Plaintext
type convert-to-ext4-sh, domain, coredomain;
|
|
type convert-to-ext4-sh_exec, system_file_type, exec_type, file_type;
|
|
|
|
userdebug_or_eng(`
|
|
permissive convert-to-ext4-sh;
|
|
|
|
init_daemon_domain(convert-to-ext4-sh)
|
|
|
|
allow convert-to-ext4-sh block_device:dir search;
|
|
allow convert-to-ext4-sh e2fs_exec:file rx_file_perms;
|
|
allow convert-to-ext4-sh efs_block_device:blk_file rw_file_perms;
|
|
allow convert-to-ext4-sh kernel:process setsched;
|
|
allow convert-to-ext4-sh kmsg_device:chr_file rw_file_perms;
|
|
allow convert-to-ext4-sh persist_block_device:blk_file { getattr ioctl open read write };
|
|
allow convert-to-ext4-sh shell_exec:file rx_file_perms;
|
|
allow convert-to-ext4-sh sysfs_fs_ext4_features:dir { read search };
|
|
allow convert-to-ext4-sh sysfs_fs_ext4_features:file read;
|
|
allow convert-to-ext4-sh tmpfs:dir { add_name create mounton open };
|
|
allow convert-to-ext4-sh tmpfs:dir { remove_name rmdir rw_file_perms setattr };
|
|
allow convert-to-ext4-sh tmpfs:file { create rw_file_perms unlink };
|
|
allow convert-to-ext4-sh toolbox_exec:file rx_file_perms;
|
|
allow convert-to-ext4-sh vendor_persist_type:dir { rw_file_perms search };
|
|
allow convert-to-ext4-sh vendor_persist_type:file rw_file_perms;
|
|
|
|
allowxperm convert-to-ext4-sh { efs_block_device persist_block_device}:blk_file ioctl {
|
|
BLKDISCARD BLKPBSZGET BLKDISCARDZEROES BLKROGET LOOP_CLR_FD
|
|
};
|
|
|
|
dontaudit convert-to-ext4-sh labeledfs:filesystem { mount unmount };
|
|
dontaudit convert-to-ext4-sh self:capability { chown fowner fsetid dac_read_search sys_admin sys_rawio };
|
|
dontaudit convert-to-ext4-sh unlabeled:dir { add_name create mounton open rw_file_perms search setattr };
|
|
dontaudit convert-to-ext4-sh unlabeled:file { create rw_file_perms setattr };
|
|
dontaudit convert-to-ext4-sh convert-to-ext4-sh:capability { dac_override };
|
|
')
|