aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/init.te
diff options
context:
space:
mode:
authorDavide Garberi <dade.garberi@gmail.com>2018-10-01 15:07:26 +0200
committerDavide Garberi <dade.garberi@gmail.com>2018-10-06 15:22:06 +0200
commit390c2de52e4b579a142032dd16836edca74e7ee1 (patch)
tree4b83036f3e493f50114354527cc56b89421d89a6 /sepolicy/init.te
parent785bb19add52f9f4ba9c84ef6dfde344e5d5f24f (diff)
msm8996-common: sepolicy: Address binder denials
Change-Id: Id73515a55b1082283789cffbd2aafecaada4e06c Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
Diffstat (limited to 'sepolicy/init.te')
-rw-r--r--sepolicy/init.te4
1 files changed, 3 insertions, 1 deletions
diff --git a/sepolicy/init.te b/sepolicy/init.te
index 5d8c97e..9730a6d 100644
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -1,4 +1,7 @@
typeattribute init data_between_core_and_vendor_violators;
+
+binder_call(init, system_server);
+
allow init adsprpcd_file:filesystem { mount relabelfrom relabelto };
allow init debugfs_ipc:dir relabelfrom;
allow init debugfs_ipc:file relabelfrom;
@@ -10,4 +13,3 @@ allow init sysfs_fingerprint:file { open read setattr write };
allow init sysfs:file setattr;
allow init tee_device:chr_file write;
allow init hidl_base_hwservice:hwservice_manager add;
-allow init system_server:binder call;