— a/alps/device/mediatek/sepolicy/basic/non_plat/adbd.te
+++ b/alps/device/mediatek/sepolicy/basic/non_plat/adbd.te
@@ -7,3 +7,4 @@
Purpose: Allow adbd to read KE DB
allow adbd aee_dumpsys_data_file:file r_file_perms;
allow adbd gpu_device:dir search;
+allow adbd adbd:capability { dac_override dac_read_search };
\ No newline at end of file
diff --git a/alps/device/mediatek/sepolicy/basic/non_plat/init.te b/alps/device/mediatek/sepolicy/basic/non_plat/init.te
old mode 100644
new mode 100755
index 862fd67eed5…51a202a0cd7
— a/alps/device/mediatek/sepolicy/basic/non_plat/init.te
+++ b/alps/device/mediatek/sepolicy/basic/non_plat/init.te
@@ -146,3 +146,5 @@ domain_auto_trans(init, postinstall_file, update_engine)
allow init sysfs_mtk_core_ctl:dir r_dir_perms;
allow init sysfs_mtk_core_ctl:file rw_file_perms;
+# add by ycj
+allow init mmcblk1p1_block_device:blk_file { write };
\ No newline at end of file
diff --git a/alps/device/mediatek/sepolicy/basic/non_plat/kernel.te b/alps/device/mediatek/sepolicy/basic/non_plat/kernel.te
old mode 100644
new mode 100755
index 3ce11ae7cc3…728df61175c
— a/alps/device/mediatek/sepolicy/basic/non_plat/kernel.te
+++ b/alps/device/mediatek/sepolicy/basic/non_plat/kernel.te
@@ -85,3 +85,6 @@ allow kernel mtk_audiohal_data_file:file write;
Date: WK19.03
allow kernel expdb_block_device:blk_file rw_file_perms;
+
+# add ycj ums
+allow kernel mmcblk1p1_block_device:blk_file { read write };
\ No newline at end of file
diff --git a/alps/frameworks/base/services/usb/java/com/android/server/usb/UsbDeviceMan