sepolicy/vendor_init.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

typeattribute vendor_init data_between_core_and_vendor_violators;

allow vendor_init {
    camera_data_file
    cnd_data_file
    fpc_data_file
    media_rw_data_file
    nfc_data_file
    rootfs
    system_data_file
    time_data_file
    thermal_data_file
    tombstone_data_file
}:dir create_dir_perms;

allow vendor_init media_rw_data_file:{ dir file } getattr;
allow vendor_init media_rw_data_file:file relabelfrom;
allow vendor_init device:file create_file_perms;