From bd2ff068d75118690f0d98c0dc86b72dc6a1ad11 Mon Sep 17 00:00:00 2001 From: Davide Garberi Date: Fri, 14 Sep 2018 22:44:13 +0200 Subject: msm8996: sepolicy: Fix device related neverallows Change-Id: Iddf2ac2f63d6f3a390e1720c11b1f334cc9729aa Signed-off-by: Davide Garberi --- sepolicy/init.te | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'sepolicy/init.te') diff --git a/sepolicy/init.te b/sepolicy/init.te index 88d2f14..55f9fac 100644 --- a/sepolicy/init.te +++ b/sepolicy/init.te @@ -4,8 +4,8 @@ allow init debugfs_ipc:file relabelfrom; allow init proc_kernel_sched:file write; allow init sysfs_scsi_devices_0000:dir write; allow init { ion_device tee_device }:chr_file ioctl; -allow init { hal_fingerprint_hwservice hidl_base_hwservice }:hwservice_manager add; -allow init { sysfs sysfs_fingerprint }:file { open read write }; +allow init hidl_base_hwservice:hwservice_manager add; +allow init sysfs_fingerprint:file { open read write }; allow init tee_device:chr_file write; allow init hidl_base_hwservice:hwservice_manager add; allow init sysfs_fingerprint:file { open read write }; -- cgit v1.2.3