Commit cff36ef2 authored by fire855's avatar fire855
Browse files

sepolicy: fix various denials

parent d5f9c220

sepolicy/bluetooth.te

+2 −0
Original line number Diff line number Diff line
@@ -4,3 +4,5 @@ allow bluetooth stpbt_device:chr_file rw_file_perms; 
# Allow nvram access

allow bluetooth nvdata_file:dir search;

allow bluetooth nvdata_file:file rw_file_perms;



allow bluetooth block_device:dir search;
 
 No newline at end of file

sepolicy/ccci_mdinit.te

+1 −0
Original line number Diff line number Diff line
@@ -11,6 +11,7 @@ allow ccci_mdinit nvdata_file:file create_file_perms; 
allow ccci_mdinit sysfs_ccci:dir search;

allow ccci_mdinit sysfs_ccci:file rw_file_perms;

allow ccci_mdinit sysfs_wake_lock:file rw_file_perms;

allow ccci_mdinit sysfs_devinfo:file r_file_perms;



allow ccci_mdinit nvram_device:blk_file rw_file_perms;

allow ccci_mdinit mtk_md_prop:property_service set;

sepolicy/etsd.te

+1 −0
Original line number Diff line number Diff line
@@ -10,6 +10,7 @@ allow etsd fingerprintd:binder { call transfer }; 
allow etsd esfp0_device:chr_file rw_file_perms;



allow etsd fingerprintd_data_file:file { create_file_perms };

allow etsd fingerprintd_data_file:file { open read write };

allow etsd fingerprintd_data_file:dir rw_dir_perms;



use_keystore(etsd)

sepolicy/gsm0710muxd.te

+2 −0
Original line number Diff line number Diff line
@@ -8,6 +8,8 @@ allow gsm0710muxd radio_device:dir w_dir_perms; 
allow gsm0710muxd radio_device:lnk_file create_file_perms;

allow gsm0710muxd devpts:chr_file setattr;

allow gsm0710muxd self:capability { setuid fowner chown };

allow gsm0710muxd sysfs_ccci:dir search;

allow gsm0710muxd sysfs_ccci:file r_file_perms;



allow gsm0710muxd ctl_rildaemon_prop:property_service set;

allow gsm0710muxd radio_prop:property_service set;

sepolicy/mnld.te

+2 −0
Original line number Diff line number Diff line
@@ -39,5 +39,7 @@ allow mnld storage_file:lnk_file read; 


allow mnld mdlog_device:chr_file { read write };



allow mnld block_device:dir search;



file_type_auto_trans(mnld,system_data_file,mnld_data_file);

file_type_auto_trans(mnld,apk_data_file,mnld_data_file);