aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/init.te
diff options
context:
space:
mode:
authorDavide Garberi <dade.garberi@gmail.com>2019-05-02 16:52:20 +0200
committerDavide Garberi <dade.garberi@gmail.com>2019-05-02 17:26:32 +0200
commit2c7ad967d1c9be71a50a9c27e336e180c035e648 (patch)
tree60e0b6d920cfaf3990dd42e254b09f2593b975ae /sepolicy/init.te
parentf03c601509bec9331de6829531d61e927e42f736 (diff)
msm8996-common: sepolicy: Cleanup
* Add back the fstab contexts to prevent some vfat denials * Remove a lot of not needed addresses * Create a domain for double tap to wake to not let the powerhal access all the sysfs files Change-Id: I44dfc5e9903eb562748215541f2d71f9a3d111d7
Diffstat (limited to 'sepolicy/init.te')
-rw-r--r--sepolicy/init.te4
1 files changed, 1 insertions, 3 deletions
diff --git a/sepolicy/init.te b/sepolicy/init.te
index 8b4e30e..5f80ca1 100644
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -1,9 +1,7 @@
allow init { ion_device tee_device }:chr_file ioctl;
allow init hidl_base_hwservice:hwservice_manager add;
allow init sysfs_fingerprint:file { open read setattr write };
-allow init sysfs:file setattr;
allow init tee_device:chr_file write;
allow init hidl_base_hwservice:hwservice_manager add;
allow init sysfs_graphics:lnk_file read;
-allow init system_file:file mounton;
-allow init hal_vibrator_default:process noatsecure;
+allow init adsprpcd_file:filesystem { mount relabelfrom relabelto };