address selinux denials

This commit is contained in:
PythonLimited 2019-07-23 11:33:20 +02:00
parent 049f9acfa5
commit 0c82e57225
6 changed files with 18 additions and 0 deletions

View file

@ -0,0 +1,2 @@
allow hal_keymaster_default vfat:dir search;
allow hal_keymaster_default vfat:file { getattr open read };

View file

@ -1 +1,2 @@
allow hal_power_default sysfs_hal_pwr:file w_file_perms;
allow hal_power_default sysfs:file { open write };

9
sepolicy/common/init.te Normal file
View file

@ -0,0 +1,9 @@
allow init debugfs:dir mounton;
allow init kernel:security check_context;
allow init rtc_device:chr_file ioctl;
allow init self:netlink_kobject_uevent_socket read;
allow init self:socket create;
allow init smd_device:chr_file write;
allow init tee_device:chr_file { ioctl write };
allow init video_device:chr_file { ioctl write };
allow init wcnss_device:chr_file write;

View file

@ -0,0 +1,2 @@
allow keystore vfat:dir search;
allow keystore vfat:file { open read };

View file

@ -6,3 +6,5 @@ allow rild radio_data_file:lnk_file read;
allow rild proc_net:file w_file_perms;
allow rild sysfs_sec:file rw_file_perms;
allow rild unlabeled:file { getattr open read };

View file

@ -0,0 +1,2 @@
allow ueventd vfat:dir search;
allow ueventd vfat:file { getattr open read };