s4-common: SELinux perms for vibration, ums

* Vibration amp permissions moved from system_app to system_server * Block write permission for kernel when writing in UMS mode Change-Id: Iaac887f10dba4fa6c713f1ee8bcc5127cf67c7f5
CyanogenMod · Mar 15, 2015 · 5755d48 · 5755d48
1 parent 21a65ec
commit 5755d48
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 3 deletions.
diff --git a/BoardConfigCommon.mk b/BoardConfigCommon.mk
@@ -85,7 +85,8 @@ BOARD_SEPOLICY_DIRS += \
 
 BOARD_SEPOLICY_UNION += \
     akmd.te \
-    ewtzmud.te
+    ewtzmud.te \
+    kernel.te
 
 # Wifi
 BOARD_HAS_QCOM_WLAN := true

diff --git a/sepolicy/kernel.te b/sepolicy/kernel.te
@@ -0,0 +1 @@
+allow kernel block_device:blk_file write;
diff --git a/sepolicy/system_app.te b/sepolicy/system_app.te
@@ -1,3 +1 @@
 allow system_app shell_data_file:dir search;
-allow system_app vibeamp_sysfs:file { getattr open read write };
-allow system_app vibeamp_sysfs:dir search;
diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
@@ -1,2 +1,4 @@
 allow system_server timerirq_device:chr_file { open read write ioctl };
+allow system_server vibeamp_sysfs:dir search;
+allow system_server vibeamp_sysfs:file { getattr open read write };
 allow system_server wifi_data_file:lnk_file { read write };