diff options
| author | Cosme Domínguez Díaz <cosme.ddiaz@gmail.com> | 2018-04-07 19:39:27 +0200 |
|---|---|---|
| committer | Cosme Domínguez Díaz <cosme.ddiaz@gmail.com> | 2018-04-07 19:39:27 +0200 |
| commit | 80ba271b8cce2bad53a20be34a840e99735807fb (patch) | |
| tree | 20b1f323a484554a7d933b26556c40b2f7572327 | |
| parent | 7ec075a0a53a787ea0bea83cfcf7f0c80c0e5c2a (diff) | |
msm8996-common: sepolicy: Fix more denials found with GSI (Phh-Treble v15).
| -rw-r--r-- | sepolicy/hwservicemanager.te | 3 | ||||
| -rw-r--r-- | sepolicy/rild.te | 2 |
2 files changed, 4 insertions, 1 deletions
diff --git a/sepolicy/hwservicemanager.te b/sepolicy/hwservicemanager.te new file mode 100644 index 0000000..14671bb --- /dev/null +++ b/sepolicy/hwservicemanager.te @@ -0,0 +1,3 @@ +allow hwservicemanager init:dir search; +allow hwservicemanager init:file { open read }; +allow hwservicemanager init:process getattr; diff --git a/sepolicy/rild.te b/sepolicy/rild.te index f578ebd..db21356 100644 --- a/sepolicy/rild.te +++ b/sepolicy/rild.te @@ -1,5 +1,5 @@ allow rild nv_data_file:dir rw_dir_perms; -allow rild nv_data_file:file create_file_perms; +allow rild nv_data_file:file { create_file_perms getattr ioctl lock open read }; allow rild { vendor_configs_file vendor_file }:file ioctl; |