aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/system_server.te
diff options
context:
space:
mode:
authordiegocr <diegocr@gmail.com>2017-03-19 01:07:43 +0100
committerdavidevinavil <davidevinavil@gmail.com>2017-04-07 13:32:16 +0200
commit213d1db0f4d2acb5425bdb2ea673b42e39c5e022 (patch)
treee4c7e9d1299665dc1fceed243778f8092502801a /sepolicy/system_server.te
parentcd4a323bb4906eec758d0106da959f2f728cfc2d (diff)
sepolicy: Fix some denials
Change-Id: I7d79eadee41a637d26c8b29a73d733d64b68d822
Diffstat (limited to 'sepolicy/system_server.te')
-rw-r--r--sepolicy/system_server.te12
1 files changed, 11 insertions, 1 deletions
diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
index 0cbb3e8..7c9fd5c 100644
--- a/sepolicy/system_server.te
+++ b/sepolicy/system_server.te
@@ -6,4 +6,14 @@ allow system_server sensors_persist_file:dir search;
allow system_server proc_stat:file r_file_perms;
allow system_server unlabeled:file unlink;
get_prop(system_server, diag_prop);
-
+allow system_server diag_device:chr_file { read write };
+allow system_server drmserver:process setsched;
+allow system_server keystore:process setsched;
+allow system_server mediacodec:process setsched;
+allow system_server mediadrmserver:process setsched;
+allow system_server mediaextractor:process setsched;
+allow system_server sdcardd:process setsched;
+allow system_server vold:process setsched;
+allow system_server zygote:process setsched;
+allow system_server diag_device:chr_file open;
+allow system_server diag_device:chr_file ioctl;