Commit Graph

5 Commits

Author SHA1 Message Date
Giuseppe Barillari c9d2148237 msm8976-common: sepolicy: Remove debugfs_rmt rules
* Already present in device/qcom/sepolicy/legacy-common

Change-Id: Ie776556d6c3f64b8e4553990c9507ea0dcf9ca0a
Signed-off-by: Giuseppe Barillari <joe2k01dev@gmail.com>
2018-04-21 13:37:09 +02:00
LuK1337 25e027d85e msm8976-common: Initial SELinux updates
* Drop domain_deprecated
* Use proper device block paths as
  symlinks are no longer working.
2018-01-26 15:47:21 +01:00
Bruno Martins 6d58bd23b5 msm8976-common: Grant rmt_storage proper unix perms
Do not grant DAC override permission which would allow this daemon
unix permissions to everything.

avc: denied { dac_override } for pid=2664 comm="rmt_storage" capability=1 scontext=u:r:rmt_storage:s0 tcontext=u:r:rmt_storage:s0 tclass=capability permissive=0

Add wakelock group to access:
/sys/power/wake_lock
-rw-rw----  1 radio  wakelock 4096 2017-06-28 00:37 wake_unlock

Change-Id: Ib02b4aedab479f5ad8aca3a2100b5c489397002a
2017-07-04 18:40:56 +02:00
LuK1337 64fd514d2c msm8976-common: Allow rmt_storage to use dac_override, net_raw capabilities
Change-Id: Ie5e567c96278711ca5c84258ecb4602aa2fafcc3
2017-02-15 21:06:05 +01:00
LuK1337 f175f6bc68 msm8976-common: Make it enforcing :3 2017-01-23 17:34:56 +01:00