Commit 5b7c9fe5 authored Jul 22, 2017 by fire855

sepolicy: fix denials

parent 123a9816

sepolicy/mediaserver.te

+3 −1

Original line number	Diff line number	Diff line
		@@ -5,3 +5,5 @@ allow mediaserver ccci_device:chr_file rw_file_perms;

		# PQ
		allow mediaserver pq_service:service_manager find;

		allow mediaserver sysfs_devinfo:file r_file_perms;

sepolicy/nvram_daemon.te

+1 −0

Original line number	Diff line number	Diff line
		@@ -15,6 +15,7 @@ allow nvram_daemon mtk-adc-cali_device:chr_file rw_file_perms;
		allow nvram_daemon gsensor_device:chr_file r_file_perms;
		allow nvram_daemon msensor_device:chr_file r_file_perms;
		allow nvram_daemon gyroscope_device:chr_file r_file_perms;
		allow nvram_daemon toolbox_exec:file rx_file_perms;

		allow nvram_daemon proinfo_device:blk_file rw_file_perms;
		allow nvram_daemon nvram_prop:property_service set;

sepolicy/ril-daemon-mtk.te

+3 −0

Original line number	Diff line number	Diff line
		@@ -28,3 +28,6 @@ allow ril-daemon-mtk ril_sim_inserted_status:property_service set;
		allow ril-daemon-mtk serial_number_prop:property_service set;

		unix_socket_connect(ril-daemon-mtk, property, init)

		# Access to wake locks
		wakelock_use(ril-daemon-mtk)

sepolicy/zygote.te

0 → 100644

+1 −0

Original line number	Diff line number	Diff line
		allow zygote sysfs_devinfo:file r_file_perms;