diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index 3d345a3..d5c87c8 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -27,7 +27,7 @@ /sys/devices/virtual/sec/sec_touchkey/brightness u:object_r:sysfs_leds:s0 # LiveDisplay -/(vendor|system/vendor)/bin/hw/vendor\.lineage\.livedisplay@2\.0-service\.samsung-qcom u:object_r:hal_lineage_livedisplay_default_exec:s0 +/(vendor|system/vendor)/bin/hw/vendor\.lineage\.livedisplay@2\.0-service\.samsung-qcom u:object_r:hal_lineage_livedisplay_sysfs_exec:s0 # mDNIe /sys/devices/virtual/mdnie/mdnie(/.*)? u:object_r:sysfs_mdnie:s0 diff --git a/sepolicy/hal_lineage_livedisplay_default.te b/sepolicy/hal_lineage_livedisplay_default.te deleted file mode 100644 index 32b8cab..0000000 --- a/sepolicy/hal_lineage_livedisplay_default.te +++ /dev/null @@ -1,2 +0,0 @@ -allow hal_lineage_livedisplay_default { sysfs_graphics sysfs_mdnie }:dir search; -allow hal_lineage_livedisplay_default { sysfs_graphics sysfs_mdnie }:file rw_file_perms; diff --git a/sepolicy/hal_lineage_livedisplay_sysfs.te b/sepolicy/hal_lineage_livedisplay_sysfs.te new file mode 100644 index 0000000..ffd297b --- /dev/null +++ b/sepolicy/hal_lineage_livedisplay_sysfs.te @@ -0,0 +1,7 @@ +# Allow LiveDisplay to store files under /data/vendor/display and access them +allow hal_lineage_livedisplay_sysfs display_vendor_data_file:dir rw_dir_perms; +allow hal_lineage_livedisplay_sysfs display_vendor_data_file:file create_file_perms; + +# Allow LiveDisplay to read and write to files in sysfs_graphics, sysfs_mdnie +allow hal_lineage_livedisplay_sysfs { sysfs_graphics sysfs_mdnie }:dir search; +allow hal_lineage_livedisplay_sysfs { sysfs_graphics sysfs_mdnie }:file rw_file_perms;