android_device_samsung_msm8.../sepolicy/common/init.te
2020-03-11 11:11:11 +03:00

68 lines
1.4 KiB
Text

# This really is necessary for init.qcom.rc to manually restorecon the
# /data/data/com.android.providers.telephony/(databases|shared_prefs)
# symlinks. Without the manual restorecon, we would have to allow rild
# to read any system_data_file:lnk_file.
selinux_check_context(init)
allow init {
sysfs_iio
sysfs_sec_tsp
sysfs_sensors
firmware_file
}:lnk_file read;
allow init {
proc
sysfs_audio
sysfs_batteryinfo
sysfs_bluetooth_writable
sysfs_camera
sysfs_graphics
sysfs_hal_pwr
sysfs_iio
sysfs_input
sysfs_kgsl
sysfs_leds
sysfs_mdnie
sysfs_msmuart_file
sysfs_sec_bamdmux
sysfs_sec_barcode_emul
sysfs_sec_epen
sysfs_sec_ir
sysfs_sec_key
sysfs_sec_led
sysfs_sec_switch
sysfs_sec_thermistor
sysfs_sec_touchkey
sysfs_sec_tsp
sysfs_sensors
sysfs_socinfo
sysfs_usb_otg
sysfs_wifi_writeable
firmware_file
}:file setattr;
allow init {
sysfs_cpu_boost
sysfs_devices_system_cpu
sysfs_lowmemorykiller
sysfs_mmc_host
sysfs_msm_perf
sysfs_msm_power
sysfs_net
sysfs_sec_key
sysfs_thermal
firmware_file
}:file w_file_perms;
allow init {
wcnss_device
}:chr_file w_file_perms;
allow init sysfs:file setattr;
allow init sysfs_devfreq:file setattr;
allow init efs_file:dir mounton;
allow init init:capability2 block_suspend;
allow init system_file:file mounton;
allow init sysfs_leds:lnk_file read;