aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/priv_app.te
diff options
context:
space:
mode:
authorDavide Garberi <dade.garberi@gmail.com>2018-10-01 15:07:26 +0200
committerDavide Garberi <dade.garberi@gmail.com>2018-10-06 15:22:06 +0200
commit390c2de52e4b579a142032dd16836edca74e7ee1 (patch)
tree4b83036f3e493f50114354527cc56b89421d89a6 /sepolicy/priv_app.te
parent785bb19add52f9f4ba9c84ef6dfde344e5d5f24f (diff)
msm8996-common: sepolicy: Address binder denials
Change-Id: Id73515a55b1082283789cffbd2aafecaada4e06c Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
Diffstat (limited to 'sepolicy/priv_app.te')
-rw-r--r--sepolicy/priv_app.te4
1 files changed, 2 insertions, 2 deletions
diff --git a/sepolicy/priv_app.te b/sepolicy/priv_app.te
index be6f717..0b0b72b 100644
--- a/sepolicy/priv_app.te
+++ b/sepolicy/priv_app.te
@@ -7,7 +7,6 @@ allow priv_app configfs:dir r_dir_perms;
allow priv_app configfs:file r_file_perms;
allow priv_app file_contexts_file:file r_file_perms;
allow priv_app firmware_file:dir r_file_perms;
-allow priv_app hal_memtrack_default:binder call;
allow priv_app hal_memtrack_hwservice:hwservice_manager find;
allow priv_app hwservice_contexts_file:file r_file_perms;
allow priv_app keylayout_file:dir r_file_perms;
@@ -22,7 +21,8 @@ allow priv_app service_contexts_file:file r_file_perms;
allow priv_app vendor_file:file rx_file_perms;
allow priv_app vndservice_contexts_file:file r_file_perms;
-r_dir_file(priv_app, sysfs_type)
+r_dir_file(priv_app, sysfs_type);
+binder_call(priv_app, hal_memtrack_default);
# Clean up logspam
dontaudit priv_app device:dir read;