Commit 83251455 authored by Blaster4385's avatar Blaster4385
Browse files

nicky: sepolicy: Fix neverallows

parent d655285c
Loading
Loading
Loading
Loading
+0 −15
Original line number Diff line number Diff line
allow init bt_firmware_file:filesystem getattr;
allow init debugfs_tracing_debug:dir mounton;
allow init default_android_hwservice:hwservice_manager find;
allow init firmware_file:filesystem getattr;
allow init hal_graphics_composer_default:binder call;
allow init hal_light_service:service_manager add;
allow init hal_lineage_livedisplay_hwservice:hwservice_manager { add find };
allow init hal_power_service:service_manager add;
allow init hidl_base_hwservice:hwservice_manager add;
allow init hwservicemanager:binder { call transfer };
allow init proc:file write;
allow init same_process_hal_file:file execute;
allow init servicemanager:binder { call transfer };
allow init sysfs:file { open read write };
allow init sysfs_graphics:file { open read write };
allow init system_file:file execute_no_trans;
allow init tee_device:chr_file { ioctl open read write };
allow init vendor_file:file { execute execute_no_trans };
allow init vendor_toolbox_exec:file execute_no_trans;
allow init vndbinder_device:chr_file { ioctl open read write };
allow init vndservicemanager:binder call;
allow init socket_device:sock_file { create setattr unlink };
allow init apex_metadata_file:lnk_file { read };
allow init hal_perf_default:binder { call transfer };
allow init hal_perf_hwservice:hwservice_manager find;
allow init hidl_base_hwservice:hwservice_manager add;
allow init sysfs_kgsl:file { open read };
allow init sysfs_kgsl:lnk_file read;
allow init system_server:binder call;
@@ -37,4 +23,3 @@ allow init iorapd_data_file:file getattr;
allow init vendor_proc_display:file { write open };
set_prop(init, vendor_power_prop);
allow init init:capability2 { mac_admin };
allow init hal_fingerprint_hwservice:hwservice_manager { find };