android_device_samsung_msm8.../sepolicy/common/init.te

69 lines
1.4 KiB
Text
Raw Normal View History

msm8226-common: sepolicy: Resolve init denials * avc: denied { write } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { open } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { setattr } for name="firmware_path" dev="sysfs" ino=6423 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_wifi_writeable:s0 tclass=file permissive=1 * avc: denied { write } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { open } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { write } for name="enabled" dev="sysfs" ino=29716 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1 * avc: denied { write } for name="online" dev="sysfs" ino=5871 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file permissive=1 * avc: denied { write } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { open } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { setattr } for name="min_pwrlevel" dev="sysfs" ino=19546 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=0 * avc: denied { setattr } for name="enabled" dev="sysfs" ino=23417 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_hal_pwr:s0 tclass=file permissive=1 * avc: denied { setattr } for name="rear_camfw" dev="sysfs" ino=24404 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=1 * avc: denied { check_context } for scontext=u:r:init:s0 tcontext=u:object_r:kernel:s0 tclass=security permissive=0 Change-Id: Id7f78abedea2209f84527b1b83259574d06a0900
2018-10-21 15:00:54 +00:00
# This really is necessary for init.qcom.rc to manually restorecon the
# /data/data/com.android.providers.telephony/(databases|shared_prefs)
# symlinks. Without the manual restorecon, we would have to allow rild
# to read any system_data_file:lnk_file.
selinux_check_context(init)
msm8226-common: sepolicy: Label sysfs_sec_* types, resolve denials * Rename sysfs_sec type to sysfs_sec_key * Add additional sysfs_sec_* types as appropriate * avc: denied { read } for name="temp_adc" dev="sysfs" ino=10538 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=1 * avc: denied { open } for name="temp_adc" dev="sysfs" ino=10538 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=1 * avc: denied { write } for name="ir_send" dev="sysfs" ino=21339 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_ir:s0 tclass=file permissive=1 * avc: denied { write } for name="led_blink" dev="sysfs" ino=25722 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_led:s0 tclass=file permissive=1 * avc: denied { write } for name="brightness" dev="sysfs" ino=23467 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_touchkey:s0 tclass=file permissive=1 * avc: denied { setattr } for name="ir_send" dev="sysfs" ino=21339 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_ir:s0 tclass=file permissive=1 * avc: denied { setattr } for name="hall_irq_ctrl" dev="sysfs" ino=29565 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { setattr } for name="epen_firm_update" dev="sysfs" ino=23585 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_epen:s0 tclass=file permissive=1 * avc: denied { setattr } for name="cmd" dev="sysfs" ino=23756 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_tsp:s0 tclass=file permissive=1 * avc: denied { write } for name="wakeup_keys" dev="sysfs" ino=29568 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { open } for name="wakeup_keys" dev="sysfs" ino=29568 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { read } for name="input" dev="sysfs" ino=24012 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_tsp:s0 tclass=lnk_file permissive=0 * avc: denied { setattr } for name="waketime" dev="sysfs" ino=29035 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_bamdmux:s0 tclass=file permissive=0 * avc: denied { setattr } for name="led_r" dev="sysfs" ino=25719 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_led:s0 tclass=file permissive=0 * avc: denied { setattr } for name="usb_sel" dev="sysfs" ino=28162 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_switch:s0 tclass=file permissive=0 * avc: denied { setattr } for name="brightness" dev="sysfs" ino=23468 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_touchkey:s0 tclass=file permissive=0 * avc: denied { setattr } for name="temperature" dev="sysfs" ino=10538 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=0 * avc: denied { setattr } for name="barcode_send" dev="sysfs" ino=19231 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_barcode_emul:s0 tclass=file permissive=0 Change-Id: I66b6d2aab875a2706f2730be9755e8d9805ffb6e
2018-11-15 02:57:03 +00:00
allow init {
sysfs_iio
sysfs_sec_tsp
sysfs_sensors
firmware_file
msm8226-common: sepolicy: Label sysfs_sec_* types, resolve denials * Rename sysfs_sec type to sysfs_sec_key * Add additional sysfs_sec_* types as appropriate * avc: denied { read } for name="temp_adc" dev="sysfs" ino=10538 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=1 * avc: denied { open } for name="temp_adc" dev="sysfs" ino=10538 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=1 * avc: denied { write } for name="ir_send" dev="sysfs" ino=21339 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_ir:s0 tclass=file permissive=1 * avc: denied { write } for name="led_blink" dev="sysfs" ino=25722 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_led:s0 tclass=file permissive=1 * avc: denied { write } for name="brightness" dev="sysfs" ino=23467 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_touchkey:s0 tclass=file permissive=1 * avc: denied { setattr } for name="ir_send" dev="sysfs" ino=21339 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_ir:s0 tclass=file permissive=1 * avc: denied { setattr } for name="hall_irq_ctrl" dev="sysfs" ino=29565 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { setattr } for name="epen_firm_update" dev="sysfs" ino=23585 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_epen:s0 tclass=file permissive=1 * avc: denied { setattr } for name="cmd" dev="sysfs" ino=23756 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_tsp:s0 tclass=file permissive=1 * avc: denied { write } for name="wakeup_keys" dev="sysfs" ino=29568 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { open } for name="wakeup_keys" dev="sysfs" ino=29568 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { read } for name="input" dev="sysfs" ino=24012 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_tsp:s0 tclass=lnk_file permissive=0 * avc: denied { setattr } for name="waketime" dev="sysfs" ino=29035 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_bamdmux:s0 tclass=file permissive=0 * avc: denied { setattr } for name="led_r" dev="sysfs" ino=25719 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_led:s0 tclass=file permissive=0 * avc: denied { setattr } for name="usb_sel" dev="sysfs" ino=28162 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_switch:s0 tclass=file permissive=0 * avc: denied { setattr } for name="brightness" dev="sysfs" ino=23468 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_touchkey:s0 tclass=file permissive=0 * avc: denied { setattr } for name="temperature" dev="sysfs" ino=10538 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=0 * avc: denied { setattr } for name="barcode_send" dev="sysfs" ino=19231 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_barcode_emul:s0 tclass=file permissive=0 Change-Id: I66b6d2aab875a2706f2730be9755e8d9805ffb6e
2018-11-15 02:57:03 +00:00
}:lnk_file read;
allow init {
proc
msm8226-common: sepolicy: Resolve init denials * avc: denied { write } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { open } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { setattr } for name="firmware_path" dev="sysfs" ino=6423 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_wifi_writeable:s0 tclass=file permissive=1 * avc: denied { write } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { open } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { write } for name="enabled" dev="sysfs" ino=29716 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1 * avc: denied { write } for name="online" dev="sysfs" ino=5871 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file permissive=1 * avc: denied { write } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { open } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { setattr } for name="min_pwrlevel" dev="sysfs" ino=19546 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=0 * avc: denied { setattr } for name="enabled" dev="sysfs" ino=23417 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_hal_pwr:s0 tclass=file permissive=1 * avc: denied { setattr } for name="rear_camfw" dev="sysfs" ino=24404 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=1 * avc: denied { check_context } for scontext=u:r:init:s0 tcontext=u:object_r:kernel:s0 tclass=security permissive=0 Change-Id: Id7f78abedea2209f84527b1b83259574d06a0900
2018-10-21 15:00:54 +00:00
sysfs_audio
sysfs_batteryinfo
sysfs_bluetooth_writable
msm8226-common: sepolicy: Resolve init denials * avc: denied { write } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { open } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { setattr } for name="firmware_path" dev="sysfs" ino=6423 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_wifi_writeable:s0 tclass=file permissive=1 * avc: denied { write } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { open } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { write } for name="enabled" dev="sysfs" ino=29716 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1 * avc: denied { write } for name="online" dev="sysfs" ino=5871 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file permissive=1 * avc: denied { write } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { open } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { setattr } for name="min_pwrlevel" dev="sysfs" ino=19546 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=0 * avc: denied { setattr } for name="enabled" dev="sysfs" ino=23417 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_hal_pwr:s0 tclass=file permissive=1 * avc: denied { setattr } for name="rear_camfw" dev="sysfs" ino=24404 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=1 * avc: denied { check_context } for scontext=u:r:init:s0 tcontext=u:object_r:kernel:s0 tclass=security permissive=0 Change-Id: Id7f78abedea2209f84527b1b83259574d06a0900
2018-10-21 15:00:54 +00:00
sysfs_camera
sysfs_graphics
msm8226-common: sepolicy: Resolve init denials * avc: denied { write } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { open } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { setattr } for name="firmware_path" dev="sysfs" ino=6423 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_wifi_writeable:s0 tclass=file permissive=1 * avc: denied { write } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { open } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { write } for name="enabled" dev="sysfs" ino=29716 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1 * avc: denied { write } for name="online" dev="sysfs" ino=5871 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file permissive=1 * avc: denied { write } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { open } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { setattr } for name="min_pwrlevel" dev="sysfs" ino=19546 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=0 * avc: denied { setattr } for name="enabled" dev="sysfs" ino=23417 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_hal_pwr:s0 tclass=file permissive=1 * avc: denied { setattr } for name="rear_camfw" dev="sysfs" ino=24404 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=1 * avc: denied { check_context } for scontext=u:r:init:s0 tcontext=u:object_r:kernel:s0 tclass=security permissive=0 Change-Id: Id7f78abedea2209f84527b1b83259574d06a0900
2018-10-21 15:00:54 +00:00
sysfs_hal_pwr
sysfs_iio
sysfs_input
msm8226-common: sepolicy: Resolve init denials * avc: denied { write } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { open } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { setattr } for name="firmware_path" dev="sysfs" ino=6423 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_wifi_writeable:s0 tclass=file permissive=1 * avc: denied { write } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { open } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { write } for name="enabled" dev="sysfs" ino=29716 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1 * avc: denied { write } for name="online" dev="sysfs" ino=5871 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file permissive=1 * avc: denied { write } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { open } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { setattr } for name="min_pwrlevel" dev="sysfs" ino=19546 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=0 * avc: denied { setattr } for name="enabled" dev="sysfs" ino=23417 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_hal_pwr:s0 tclass=file permissive=1 * avc: denied { setattr } for name="rear_camfw" dev="sysfs" ino=24404 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=1 * avc: denied { check_context } for scontext=u:r:init:s0 tcontext=u:object_r:kernel:s0 tclass=security permissive=0 Change-Id: Id7f78abedea2209f84527b1b83259574d06a0900
2018-10-21 15:00:54 +00:00
sysfs_kgsl
sysfs_leds
sysfs_mdnie
sysfs_msmuart_file
msm8226-common: sepolicy: Label sysfs_sec_* types, resolve denials * Rename sysfs_sec type to sysfs_sec_key * Add additional sysfs_sec_* types as appropriate * avc: denied { read } for name="temp_adc" dev="sysfs" ino=10538 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=1 * avc: denied { open } for name="temp_adc" dev="sysfs" ino=10538 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=1 * avc: denied { write } for name="ir_send" dev="sysfs" ino=21339 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_ir:s0 tclass=file permissive=1 * avc: denied { write } for name="led_blink" dev="sysfs" ino=25722 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_led:s0 tclass=file permissive=1 * avc: denied { write } for name="brightness" dev="sysfs" ino=23467 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_touchkey:s0 tclass=file permissive=1 * avc: denied { setattr } for name="ir_send" dev="sysfs" ino=21339 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_ir:s0 tclass=file permissive=1 * avc: denied { setattr } for name="hall_irq_ctrl" dev="sysfs" ino=29565 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { setattr } for name="epen_firm_update" dev="sysfs" ino=23585 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_epen:s0 tclass=file permissive=1 * avc: denied { setattr } for name="cmd" dev="sysfs" ino=23756 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_tsp:s0 tclass=file permissive=1 * avc: denied { write } for name="wakeup_keys" dev="sysfs" ino=29568 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { open } for name="wakeup_keys" dev="sysfs" ino=29568 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { read } for name="input" dev="sysfs" ino=24012 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_tsp:s0 tclass=lnk_file permissive=0 * avc: denied { setattr } for name="waketime" dev="sysfs" ino=29035 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_bamdmux:s0 tclass=file permissive=0 * avc: denied { setattr } for name="led_r" dev="sysfs" ino=25719 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_led:s0 tclass=file permissive=0 * avc: denied { setattr } for name="usb_sel" dev="sysfs" ino=28162 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_switch:s0 tclass=file permissive=0 * avc: denied { setattr } for name="brightness" dev="sysfs" ino=23468 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_touchkey:s0 tclass=file permissive=0 * avc: denied { setattr } for name="temperature" dev="sysfs" ino=10538 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=0 * avc: denied { setattr } for name="barcode_send" dev="sysfs" ino=19231 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_barcode_emul:s0 tclass=file permissive=0 Change-Id: I66b6d2aab875a2706f2730be9755e8d9805ffb6e
2018-11-15 02:57:03 +00:00
sysfs_sec_bamdmux
sysfs_sec_barcode_emul
sysfs_sec_epen
sysfs_sec_ir
sysfs_sec_key
sysfs_sec_led
sysfs_sec_switch
sysfs_sec_thermistor
sysfs_sec_touchkey
sysfs_sec_tsp
sysfs_sensors
sysfs_socinfo
sysfs_usb_otg
msm8226-common: sepolicy: Resolve init denials * avc: denied { write } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { open } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { setattr } for name="firmware_path" dev="sysfs" ino=6423 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_wifi_writeable:s0 tclass=file permissive=1 * avc: denied { write } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { open } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { write } for name="enabled" dev="sysfs" ino=29716 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1 * avc: denied { write } for name="online" dev="sysfs" ino=5871 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file permissive=1 * avc: denied { write } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { open } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { setattr } for name="min_pwrlevel" dev="sysfs" ino=19546 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=0 * avc: denied { setattr } for name="enabled" dev="sysfs" ino=23417 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_hal_pwr:s0 tclass=file permissive=1 * avc: denied { setattr } for name="rear_camfw" dev="sysfs" ino=24404 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=1 * avc: denied { check_context } for scontext=u:r:init:s0 tcontext=u:object_r:kernel:s0 tclass=security permissive=0 Change-Id: Id7f78abedea2209f84527b1b83259574d06a0900
2018-10-21 15:00:54 +00:00
sysfs_wifi_writeable
firmware_file
}:file setattr;
allow init {
msm8226-common: sepolicy: Resolve init denials * avc: denied { write } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { open } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { setattr } for name="firmware_path" dev="sysfs" ino=6423 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_wifi_writeable:s0 tclass=file permissive=1 * avc: denied { write } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { open } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { write } for name="enabled" dev="sysfs" ino=29716 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1 * avc: denied { write } for name="online" dev="sysfs" ino=5871 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file permissive=1 * avc: denied { write } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { open } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { setattr } for name="min_pwrlevel" dev="sysfs" ino=19546 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=0 * avc: denied { setattr } for name="enabled" dev="sysfs" ino=23417 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_hal_pwr:s0 tclass=file permissive=1 * avc: denied { setattr } for name="rear_camfw" dev="sysfs" ino=24404 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=1 * avc: denied { check_context } for scontext=u:r:init:s0 tcontext=u:object_r:kernel:s0 tclass=security permissive=0 Change-Id: Id7f78abedea2209f84527b1b83259574d06a0900
2018-10-21 15:00:54 +00:00
sysfs_cpu_boost
sysfs_devices_system_cpu
sysfs_lowmemorykiller
sysfs_mmc_host
sysfs_msm_perf
msm8226-common: sepolicy: Resolve init denials * avc: denied { write } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { open } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { setattr } for name="firmware_path" dev="sysfs" ino=6423 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_wifi_writeable:s0 tclass=file permissive=1 * avc: denied { write } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { open } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { write } for name="enabled" dev="sysfs" ino=29716 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1 * avc: denied { write } for name="online" dev="sysfs" ino=5871 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file permissive=1 * avc: denied { write } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { open } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { setattr } for name="min_pwrlevel" dev="sysfs" ino=19546 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=0 * avc: denied { setattr } for name="enabled" dev="sysfs" ino=23417 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_hal_pwr:s0 tclass=file permissive=1 * avc: denied { setattr } for name="rear_camfw" dev="sysfs" ino=24404 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=1 * avc: denied { check_context } for scontext=u:r:init:s0 tcontext=u:object_r:kernel:s0 tclass=security permissive=0 Change-Id: Id7f78abedea2209f84527b1b83259574d06a0900
2018-10-21 15:00:54 +00:00
sysfs_msm_power
sysfs_net
sysfs_sec_key
msm8226-common: sepolicy: Resolve init denials * avc: denied { write } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { open } for name="enable_adaptive_lmk" dev="sysfs" ino=6724 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_lowmemorykiller:s0 tclass=file permissive=1 * avc: denied { setattr } for name="firmware_path" dev="sysfs" ino=6423 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_wifi_writeable:s0 tclass=file permissive=1 * avc: denied { write } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { open } for name="l2" dev="sysfs" ino=29063 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_power:s0 tclass=file permissive=1 * avc: denied { write } for name="enabled" dev="sysfs" ino=29716 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_thermal:s0 tclass=file permissive=1 * avc: denied { write } for name="online" dev="sysfs" ino=5871 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_devices_system_cpu:s0 tclass=file permissive=1 * avc: denied { write } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { open } for name="boost_ms" dev="sysfs" ino=6652 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_cpu_boost:s0 tclass=file permissive=1 * avc: denied { setattr } for name="min_pwrlevel" dev="sysfs" ino=19546 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=file permissive=0 * avc: denied { setattr } for name="enabled" dev="sysfs" ino=23417 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_hal_pwr:s0 tclass=file permissive=1 * avc: denied { setattr } for name="rear_camfw" dev="sysfs" ino=24404 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=1 * avc: denied { check_context } for scontext=u:r:init:s0 tcontext=u:object_r:kernel:s0 tclass=security permissive=0 Change-Id: Id7f78abedea2209f84527b1b83259574d06a0900
2018-10-21 15:00:54 +00:00
sysfs_thermal
firmware_file
}:file w_file_perms;
allow init {
wcnss_device
}:chr_file w_file_perms;
allow init sysfs:file setattr;
allow init sysfs_devfreq:file setattr;
allow init efs_file:dir mounton;
allow init init:capability2 block_suspend;
allow init system_file:file mounton;
allow init sysfs_leds:lnk_file read;