aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/init.te
diff options
context:
space:
mode:
authorDavide Garberi <dade.garberi@gmail.com>2018-09-14 22:22:05 +0200
committerDavide Garberi <dade.garberi@gmail.com>2018-09-16 15:22:11 +0200
commit849a67f0b49aba827b642a8a1aca611d5a289f29 (patch)
tree3ad368dc3d1e0bb87a2879ac26543bc923061219 /sepolicy/init.te
parent4e7cfbca0e0367f6d9ffb84401da1213d6224413 (diff)
msm8996: sepolicy: Address some denials
Change-Id: I8f4d9588573e48069d365b77b081f981b4948fbb Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
Diffstat (limited to 'sepolicy/init.te')
-rw-r--r--sepolicy/init.te7
1 files changed, 7 insertions, 0 deletions
diff --git a/sepolicy/init.te b/sepolicy/init.te
index bf04885..88d2f14 100644
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -3,3 +3,10 @@ allow init debugfs_ipc:dir relabelfrom;
allow init debugfs_ipc:file relabelfrom;
allow init proc_kernel_sched:file write;
allow init sysfs_scsi_devices_0000:dir write;
+allow init { ion_device tee_device }:chr_file ioctl;
+allow init { hal_fingerprint_hwservice hidl_base_hwservice }:hwservice_manager add;
+allow init { sysfs sysfs_fingerprint }:file { open read write };
+allow init tee_device:chr_file write;
+allow init hidl_base_hwservice:hwservice_manager add;
+allow init sysfs_fingerprint:file { open read write };
+allow init system_server:binder call;