Android 4.4.2 SELinux 与系统关系详解一： mac_permissions.xml 生成、编译过程分析

Middleware MAC:

mac_permissions.xml 文件：
Rules:
    * A signature is a hex encoded X.509 certificate and is required for each signer tag.
    * A <signer signature="" > element may have multiple child elements:
        allow-permission : produces a set of maximal allowed permissions (whitelist).
        deny-permission : produces a blacklist of permissions to deny.
        allow-all : a wildcard tag that will allow every permission requested.
        package : a complex tag which itself defines allow, deny, and wildcard sub elements for
            a specific package name protected by the signature
    * Zero or more global <package name=""> tags are allowed. These tags allow a policy
      to be set outside any signature for specific package names.
    * A <default> tag is allowed that can contain install policy for all apps not signed