diff options
author | davidevinavil <davidevinavil@gmail.com> | 2017-03-22 22:15:43 +0100 |
---|---|---|
committer | davidevinavil <davidevinavil@gmail.com> | 2017-04-07 13:32:36 +0200 |
commit | b5bbb4089b79e3249a5239848a953a9d0f99443a (patch) | |
tree | b5a420815247324de1eee127408ed83d667fb55c | |
parent | e0e3e7574e8329a91dbf7812c5d2aa70b35b95ef (diff) |
sepolicy: Remove dashd
-rw-r--r-- | sepolicy/dashd.te | 46 |
1 files changed, 0 insertions, 46 deletions
diff --git a/sepolicy/dashd.te b/sepolicy/dashd.te deleted file mode 100644 index 41525dd..0000000 --- a/sepolicy/dashd.te +++ /dev/null @@ -1,46 +0,0 @@ -# dash daemon - -# dashd seclabel is specified in init.rc since -# it lives in the rootfs and has no unique file type. -type dashd, domain; - -# Write to /dev/kmsg -allow dashd kmsg_device:chr_file rw_file_perms; - -allow dashd self:capability { net_admin sys_tty_config }; -wakelock_use(dashd) -allow dashd self:netlink_kobject_uevent_socket create_socket_perms; -binder_use(dashd) -binder_service(dashd) -binder_call(dashd, system_server) - -# Write to state file. -allow dashd sysfs:file write; - -### -### dashd: charger mode -### - -# Read /sys/fs/pstore/console-ramoops -# Don't worry about overly broad permissions for now, as there's -# only one file in /sys/fs/pstore -allow dashd pstorefs:dir r_dir_perms; -allow dashd pstorefs:file r_file_perms; - -allow dashd graphics_device:dir r_dir_perms; -allow dashd graphics_device:chr_file rw_file_perms; -allow dashd input_device:dir r_dir_perms; -allow dashd input_device:chr_file rw_file_perms; -allow dashd tty_device:chr_file rw_file_perms; -allow dashd ashmem_device:chr_file execute; -allow dashd self:process execmem; -allow dashd proc_sysrq:file rw_file_perms; -allow dashd self:capability { sys_boot dac_override}; -allow dashd device:dir { open read write } ; -#allow dashd device:chr_file { write read }; - -allow dashd proc_stat:file r_file_perms; -allow dashd sysfs_batteryinfo:file r_file_perms; - -r_dir_file(dashd, sysfs_usb_supply); -r_dir_file(dashd, sysfs_battery_supply); |