From 213d1db0f4d2acb5425bdb2ea673b42e39c5e022 Mon Sep 17 00:00:00 2001 From: diegocr Date: Sun, 19 Mar 2017 01:07:43 +0100 Subject: sepolicy: Fix some denials Change-Id: I7d79eadee41a637d26c8b29a73d733d64b68d822 --- sepolicy/system_server.te | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) (limited to 'sepolicy/system_server.te') diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te index 0cbb3e8..7c9fd5c 100644 --- a/sepolicy/system_server.te +++ b/sepolicy/system_server.te @@ -6,4 +6,14 @@ allow system_server sensors_persist_file:dir search; allow system_server proc_stat:file r_file_perms; allow system_server unlabeled:file unlink; get_prop(system_server, diag_prop); - +allow system_server diag_device:chr_file { read write }; +allow system_server drmserver:process setsched; +allow system_server keystore:process setsched; +allow system_server mediacodec:process setsched; +allow system_server mediadrmserver:process setsched; +allow system_server mediaextractor:process setsched; +allow system_server sdcardd:process setsched; +allow system_server vold:process setsched; +allow system_server zygote:process setsched; +allow system_server diag_device:chr_file open; +allow system_server diag_device:chr_file ioctl; -- cgit v1.2.3