Commit b5d9822f authored by fire855's avatar fire855
Browse files

sepolicy: fix denials & small cleanup

parent 1b0bba30

sepolicy/app.te

0 → 100644
+3 −0
Original line number Diff line number Diff line 
# Graphics

allow appdomain proc_ged:file r_file_perms;

allow appdomain proc_mtk_cmdq:file r_file_perms;

sepolicy/platform_app.te

+0 −3
Original line number Diff line number Diff line 
# Graphics

allow platform_app proc_ged:file r_file_perms;



# Fingerprint

allow platform_app esfp0_device:chr_file rw_file_perms;

allow platform_app esfp0_device:chr_file rw_file_perms;

sepolicy/priv_app.te

+0 −3
Original line number Diff line number Diff line 
# Graphics

allow priv_app proc_ged:file r_file_perms;



# Guiext

allow priv_app guiext-server_service:service_manager find;

sepolicy/ril-daemon-mtk.te

+2 −0
Original line number Diff line number Diff line
@@ -27,6 +27,8 @@ allow ril-daemon-mtk ril_mux_report_case_prop:property_service set; 
allow ril-daemon-mtk ril_sim_inserted_status:property_service set;

allow ril-daemon-mtk serialno_prop:property_service set;



allowxperm ril-daemon-mtk self:udp_socket ioctl {SIOCDELRT SIOCSIFFLAGS SIOCSIFADDR SIOCKILLADDR SIOCDEVPRIVATE SIOCDEVPRIVATE_1};



unix_socket_connect(ril-daemon-mtk, property, init)



# Access to wake locks

sepolicy/system_app.te

+0 −2
Original line number Diff line number Diff line 
allow system_app proc_ged:file r_file_perms;



allow system_app fm_device:chr_file rw_file_perms;



allow system_app gyro_orientation_sysfs:file rw_file_perms;