From f0168de5c976b7ae5471b28641fbac9115bae50d Mon Sep 17 00:00:00 2001 From: Davide Garberi Date: Thu, 4 Jan 2018 20:57:28 +0100 Subject: msm8996-common: sepolicy: Update * Thanks codeworkx that gave me some advices for this :D Signed-off-by: Davide Garberi --- sepolicy/init.te | 15 +++++++++++++++ 1 file changed, 15 insertions(+) (limited to 'sepolicy/init.te') diff --git a/sepolicy/init.te b/sepolicy/init.te index 33a9b3e..075823c 100644 --- a/sepolicy/init.te +++ b/sepolicy/init.te @@ -1,2 +1,17 @@ allow init socket_device:sock_file { create unlink setattr }; allow init proc_dirty_ratio:file write; +allow init vfat:dir mounton; + +allow init block_device:lnk_file relabelfrom; + +allow init { cache_block_device misc_block_device frp_block_device userdata_block_device rpmb_device dip_device recovery_block_device mba_debug_dev modem_efs_partition_device gpt_block_device persist_block_device }:lnk_file relabelto; + +allow init init:socket { create bind read }; +allow init init:capability net_bind_service; + +allow init { ssd_device rpmb_device modem_efs_partition_device }:blk_file write; + +allow init qti_debugfs:file write; + +allow init { tee_device diag_device }:chr_file { write read open ioctl }; +allow init ion_device:chr_file { read open ioctl }; -- cgit v1.2.3