From b6d300b7955c29ca21e0140f24822998dd11d623 Mon Sep 17 00:00:00 2001 From: dd3boh Date: Mon, 21 Aug 2017 08:48:30 +0200 Subject: sepolicy: Address some denials Signed-off-by: dd3boh --- sepolicy/bootstat.te | 1 + sepolicy/qti_init_shell.te | 1 + 2 files changed, 2 insertions(+) create mode 100644 sepolicy/bootstat.te diff --git a/sepolicy/bootstat.te b/sepolicy/bootstat.te new file mode 100644 index 0000000..ffe9fc3 --- /dev/null +++ b/sepolicy/bootstat.te @@ -0,0 +1 @@ +allow bootstat rootfs:lnk_file { getattr }; diff --git a/sepolicy/qti_init_shell.te b/sepolicy/qti_init_shell.te index 382d8bb..52a3a9c 100644 --- a/sepolicy/qti_init_shell.te +++ b/sepolicy/qti_init_shell.te @@ -1,4 +1,5 @@ allow qti_init_shell kmsg_device:chr_file { write open }; allow qti_init_shell diag_prop:property_service set; allow qti_init_shell self:socket create_socket_perms; +allow qti_init_shell sysfs_devices_system_cpu:file { setattr }; qmux_socket(qti_init_shell) -- cgit v1.2.3