sepolicy/vendor_init.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

typeattribute vendor_init data_between_core_and_vendor_violators;
allow vendor_init proc_kernel_sched:file write;

allow vendor_init {
    camera_data_file
    cnd_data_file
#   dpmd_data_file
    fpc_data_file
    media_rw_data_file
    nfc_data_file
    rootfs
    system_data_file
    time_data_file
    thermal_data_file
    tombstone_data_file
}:dir create_dir_perms;
allow vendor_init media_rw_data_file:{ dir file } getattr;
allow vendor_init media_rw_data_file: file relabelfrom;
allow vendor_init device:file create_file_perms;