PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Modify SELinux rules to allow vold to use the keymaster HAL directly.

Browse Source 
Description：
Since the Android N project uses Keymaster 1.5 and added full disk encryption support in vold when upgrading to Android T, the SELinux rules need to allow vold to use the keymaster HAL directly.

Bug: 319506037

Change-Id: Ib21c59156a6de0c2b148e33de2fe8efb3606e697
This commit is contained in:
Peter Lee 2024-01-26 09:14:23 +00:00
parent d9c3aec4f2
commit b1c857c824
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
prebuilts/api/33.0/public/vold.te
View File

@ -327,6 +327,7 @@ neverallow { domain -vold -init } restorecon_prop:property_service set;
neverallow vold { neverallow vold {
domain domain
-hal_health_storage_server -hal_health_storage_server
-hal_keymaster_server
-system_suspend_server -system_suspend_server
-hal_bootctl_server -hal_bootctl_server
-hwservicemanager -hwservicemanager

1
public/vold.te
View File

@ -327,6 +327,7 @@ neverallow { domain -vold -init } restorecon_prop:property_service set;
neverallow vold { neverallow vold {
domain domain
-hal_health_storage_server -hal_health_storage_server
-hal_keymaster_server
-system_suspend_server -system_suspend_server
-hal_bootctl_server -hal_bootctl_server
-hwservicemanager -hwservicemanager