sanders: Add few sepolicies

Signed-off-by: ronaxdevil <pratabidya.007@gmail.com>
This commit is contained in:
dybios
2019-09-08 18:08:50 +05:30
committed by ronaxdevil
parent 2acb264188
commit 68ab697535
2 changed files with 6 additions and 3 deletions

View File

@@ -9,10 +9,10 @@
# /dev/block/bootdevice/by-name/system /system ext4 ro,barrier=1,discard wait # /dev/block/bootdevice/by-name/system /system ext4 ro,barrier=1,discard wait
/dev/block/bootdevice/by-name/userdata /data f2fs rw,discard,nosuid,nodev,noatime,nodiratime,nobarrier,inline_xattr,inline_data wait,check,formattable,encryptable=/dev/block/bootdevice/by-name/metadata,reservedsize=128M /dev/block/bootdevice/by-name/userdata /data f2fs rw,discard,nosuid,nodev,noatime,nodiratime,nobarrier,inline_xattr,inline_data wait,check,formattable,encryptable=/dev/block/bootdevice/by-name/metadata,reservedsize=128M
/dev/block/bootdevice/by-name/cache /cache ext4 rw,noatime,nosuid,nodev,barrier=1,data=ordered wait,check,formattable /dev/block/bootdevice/by-name/cache /cache ext4 rw,noatime,nosuid,nodev,barrier=1,data=ordered wait,check,formattable
/dev/block/bootdevice/by-name/modem /vendor/firmware_mnt ext4 ro,nosuid,nodev,barrier=0 wait /dev/block/bootdevice/by-name/modem /vendor/firmware_mnt ext4 ro,nosuid,nodev,barrier=0,context=u:object_r:firmware_file:s0 wait
/dev/block/bootdevice/by-name/fsg /fsg ext4 ro,nosuid,nodev wait /dev/block/bootdevice/by-name/fsg /fsg ext4 ro,nosuid,nodev,context=u:object_r:fsg_file:s0 wait
/dev/block/bootdevice/by-name/dsp /vendor/dsp ext4 ro,nosuid,nodev,barrier=1 wait /dev/block/bootdevice/by-name/dsp /vendor/dsp ext4 ro,nosuid,nodev,barrier=1 wait
/dev/block/bootdevice/by-name/persist /mnt/vendor/persist ext4 nosuid,nodev,barrier=1,noatime,noauto_da_alloc wait /dev/block/bootdevice/by-name/persist /mnt/vendor/persist ext4 nosuid,nodev,barrier=1,noatime,noauto_da_alloc,context=u:object_r:persist_file:s0 wait
/dev/block/bootdevice/by-name/boot /boot emmc defaults recoveryonly /dev/block/bootdevice/by-name/boot /boot emmc defaults recoveryonly
/dev/block/bootdevice/by-name/recovery /recovery emmc defaults recoveryonly /dev/block/bootdevice/by-name/recovery /recovery emmc defaults recoveryonly
/dev/block/bootdevice/by-name/misc /misc emmc defaults defaults /dev/block/bootdevice/by-name/misc /misc emmc defaults defaults

View File

@@ -8,3 +8,6 @@ allow rmt_storage debugfs_rmt_storage:file w_file_perms;
allow rmt_storage fsg_file:file { open read }; allow rmt_storage fsg_file:file { open read };
allow rmt_storage fsg_file:dir search; allow rmt_storage fsg_file:dir search;
allow rmt_storage fsg_file:lnk_file read;
allow rmt_storage persist_file:dir r_dir_perms;