— a/device/rockchip/common/sepolicy/vendor/file_contexts
+++ b/device/rockchip/common/sepolicy/vendor/file_contexts
@@ -190,6 +190,9 @@
#samba
/system/bin/cifsmanager.sh u:object_r:vold_exec:s0
+#preloadmedia_exec
+/system/bin/test_camera.sh u:object_r:preloadmedia_exec:s0
+
#rockchip audiosetting
/odm/media(/.*)? u:object_r:oemfs:s0
new file
device/rockchip/common/sepolicy/vendor/preloadmedia.te
type preloadmedia, domain, mlstrustedsubject;
type preloadmedia_exec, exec_type, file_type, system_file_type;
typeattribute preloadmedia coredomain;
init_daemon_domain(preloadmedia)
permissive preloadmedia;
domain_trans(init, shell_exec, preloadmedia)
allow preloadmedia shell_exec:file { read execute getattr};
allow preloadmedia system_data_file:file { getattr};
allow preloadmedia storage_file:lnk_file { read };
allow