From 0e89ed5c612bcb020b146b342e1e3a3d96fbb6c4 Mon Sep 17 00:00:00 2001 From: Subhajeet Muhuri Date: Fri, 19 Jul 2019 14:02:01 +0530 Subject: [PATCH] sdm660-common: sepolicy: Address more vendor_init denials --- sepolicy/vendor/vendor_init.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/sepolicy/vendor/vendor_init.te b/sepolicy/vendor/vendor_init.te index 306699ab..85e086f1 100644 --- a/sepolicy/vendor/vendor_init.te +++ b/sepolicy/vendor/vendor_init.te @@ -8,6 +8,8 @@ allow vendor_init { }:dir { create search getattr open read setattr ioctl write add_name remove_name rmdir relabelfrom }; set_prop(vendor_init, camera_prop) +allow vendor_init media_rw_data_file:file { getattr relabelfrom }; + allow vendor_init rootfs:dir { add_name create setattr write }; allow vendor_init persist_debug_prop:property_service set; allow vendor_init persist_dpm_prop:property_service set;