unplugged-vendor/device/mediatek/sepolicy/basic/plat_private/init.te

18 lines
564 B
Plaintext

# ==============================================
# MTK Policy Rule
# ==============================================
# insmod LKM under /odm or /vendor
allow init self:capability sys_module;
allow init system_file:system module_load;
# boot process denial clean up
allow init debugfs_tracing:dir w_dir_perms;
allow init debugfs_tracing:file w_file_perms;
allow init sysfs_devices_system_cpu:file relabelfrom;
domain_auto_trans(init, mtk_plpath_utils_exec, update_engine)
#allow write for mobile_log_d.rc
allow init proc_dynamic_debug_control:file w_file_perms;