aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/init.te
diff options
context:
space:
mode:
authorDavide Garberi <dade.garberi@gmail.com>2018-01-04 20:57:28 +0100
committerDavide Garberi <dade.garberi@gmail.com>2018-01-05 14:23:51 +0100
commitf0168de5c976b7ae5471b28641fbac9115bae50d (patch)
tree5d0227e519bb175fe0cc9bde85537d2cba355106 /sepolicy/init.te
parent78ae225c3c9a16d7d7a6e09b580656cc0f2dde94 (diff)
msm8996-common: sepolicy: Update
* Thanks codeworkx that gave me some advices for this :D Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
Diffstat (limited to 'sepolicy/init.te')
-rw-r--r--sepolicy/init.te15
1 files changed, 15 insertions, 0 deletions
diff --git a/sepolicy/init.te b/sepolicy/init.te
index 33a9b3e..075823c 100644
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -1,2 +1,17 @@
allow init socket_device:sock_file { create unlink setattr };
allow init proc_dirty_ratio:file write;
+allow init vfat:dir mounton;
+
+allow init block_device:lnk_file relabelfrom;
+
+allow init { cache_block_device misc_block_device frp_block_device userdata_block_device rpmb_device dip_device recovery_block_device mba_debug_dev modem_efs_partition_device gpt_block_device persist_block_device }:lnk_file relabelto;
+
+allow init init:socket { create bind read };
+allow init init:capability net_bind_service;
+
+allow init { ssd_device rpmb_device modem_efs_partition_device }:blk_file write;
+
+allow init qti_debugfs:file write;
+
+allow init { tee_device diag_device }:chr_file { write read open ioctl };
+allow init ion_device:chr_file { read open ioctl };