Skip to content
This repository has been archived by the owner on Nov 26, 2023. It is now read-only.

Commit

Permalink
Collect missing SEPolicy allows
Browse files Browse the repository at this point in the history
  • Loading branch information
nattolecats committed Jan 30, 2023
1 parent 96cf8a6 commit ac6bac3
Show file tree
Hide file tree
Showing 3 changed files with 12 additions and 0 deletions.
9 changes: 9 additions & 0 deletions sepolicy/vendor/google/init.te
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
allow init default_android_service:service_manager add;
allow init hal_confirmationui_hwservice:hwservice_manager { add find };
allow init hidl_base_hwservice:hwservice_manager add;
allow init hwservicemanager:binder { call transfer };
allow init same_process_hal_file:file execute;
allow init servicemanager:binder { call transfer };
allow init sysfs_batteryinfo:file { open write };
allow init sysfs_chargelevel:file { open write };
allow init vendor_file:file { execute execute_no_trans };
1 change: 1 addition & 0 deletions sepolicy/vendor/google/platform_app.te
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
allow platform_app default_android_service:service_manager find;
2 changes: 2 additions & 0 deletions sepolicy/vendor/google/vendor_init.te
Original file line number Diff line number Diff line change
@@ -1 +1,3 @@
set_prop(vendor_init, vendor_thermal_prop)

allow vendor_init device:file create;

0 comments on commit ac6bac3

Please sign in to comment.