klte-common: fix a few denials

Change-Id: I1aa71a071faf13c71b825cd84583c61106198810
(cherry picked from commit 1de5a396a728efc8d6f9a4c7292ff0a17625ce8d)
This commit is contained in:
OzzysCmAcc 2016-09-20 21:31:36 +02:00 committed by Kevin Haggerty
parent 401af8d098
commit dcebc16e28
5 changed files with 8 additions and 2 deletions

View File

@ -17,7 +17,7 @@
/sys/devices/virtual/lcd/panel/power_reduce u:object_r:sysfs_display:s0
# EFS
/dev/block/bootdevice/by-name/efs u:object_r:modem_efs_partition_device:s0
/dev/block/platform/msm_sdcc.1/by-name/efs u:object_r:modem_efs_partition_device:s0
# Fingerprint
/system/bin/vcsFPService u:object_r:vcs_exec:s0

1
sepolicy/hostapd.te Normal file
View File

@ -0,0 +1 @@
allow hostapd bluetooth_device:chr_file { open read };

View File

@ -2,8 +2,11 @@ type macloader, domain;
type macloader_exec, exec_type, file_type;
init_daemon_domain(macloader)
type_transition macloader system_data_file:file wifi_data_file;
allow macloader efs_file:dir search;
allow macloader self:capability { chown dac_override fowner fsetid };
allow macloader wifi_data_file:file create_file_perms;
allow macloader wifi_data_file:file { create_file_perms getattr setattr };
allow macloader wifi_efs_file:dir search;
allow macloader wifi_efs_file:file r_file_perms;
allow macloader system_data_file:dir { add_name search write };

1
sepolicy/thermal-engine Normal file
View File

@ -0,0 +1 @@
allow thermal-engine self:capability chown;

1
sepolicy/vold.te Normal file
View File

@ -0,0 +1 @@
allow vold efs_file:dir r_file_perms;