| # ============================================== |
| # MTK Policy Rule |
| # ============================================== |
| |
| # Date : WK17.32 |
| # Operation : Migration |
| # Purpose : create ext4 images for protect1/protect2/persist/nvdata/nvcfg block devices. |
| allow e2fs protect1_block_device:blk_file rw_file_perms; |
| allow e2fs protect2_block_device:blk_file rw_file_perms; |
| allow e2fs persist_block_device:blk_file rw_file_perms; |
| allow e2fs nvdata_device:blk_file rw_file_perms; |
| allow e2fs nvcfg_block_device:blk_file rw_file_perms; |
| |
| allow e2fs devpts:chr_file {read write}; |
| |
| # Date : WK18.23 |
| # Operation: P migration |
| # Purpose : Allow mke2fs to format userdata and cache partition |
| allow e2fs cache_block_device:blk_file rw_file_perms; |
| allow e2fs userdata_block_device:blk_file rw_file_perms; |
| |
| # Date : WK19.23 |
| # Operation: Q migration |
| # Purpose : Allow format /metadata for UDC |
| allow e2fs metadata_block_device:blk_file rw_file_perms; |
| |
| # Date : WK19.34 |
| # Operation: Q migration |
| # Purpose : Allow mke2fs to use ioctl/ioctlcmd |
| allowxperm e2fs protect1_block_device:blk_file ioctl { BLKPBSZGET BLKROGET BLKDISCARD BLKDISCARDZEROES BLKSECDISCARD }; |
| allowxperm e2fs protect2_block_device:blk_file ioctl { BLKPBSZGET BLKROGET BLKDISCARD BLKDISCARDZEROES BLKSECDISCARD }; |
| allowxperm e2fs nvdata_device:blk_file ioctl { BLKPBSZGET BLKROGET BLKDISCARD BLKDISCARDZEROES BLKSECDISCARD }; |
| allowxperm e2fs nvcfg_block_device:blk_file ioctl { BLKPBSZGET BLKROGET BLKDISCARD BLKDISCARDZEROES BLKSECDISCARD }; |
| allowxperm e2fs persist_block_device:blk_file ioctl { BLKPBSZGET BLKROGET BLKDISCARD BLKDISCARDZEROES BLKSECDISCARD }; |
