MiPad4/android_device_xiaomi_sdm660-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sdm660-common: Address some more denials

Browse source 
Signed-off-by: Anush02198 <Anush.4376@gmail.com>
Signed-off-by: clarencelol <clarencekuiek@icloud.com>
Signed-off-by: pix106 <sbordenave@gmail.com>
This commit is contained in:
Anush02198 2021-05-15 12:44:36 +05:30 committed by pix106
parent ea39254a1c
commit 72d6549660
7 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
sepolicy/vendor/gmscore_app.te vendored
View file

@ -1,2 +1,6 @@
binder_call(gmscore_app, hal_memtrack_default);
dontaudit gmscore_app { bt_firmware_file firmware_file }:filesystem getattr;
allow gmscore_app adsprpcd_file:dir{ search };
allow gmscore_app exported_camera_prop:file { read open getattr };

2
sepolicy/vendor/gpuservice.te vendored
View file

@ -1 +1 @@
allow gpuservice graphics_config_prop:file { open read getattr };
allow gpuservice graphics_config_prop:file { open read map getattr };

1
sepolicy/vendor/init.te vendored
View file

@ -13,3 +13,4 @@ allow init {
}:filesystem getattr;
allow init firmware_file:filesystem { getattr };
allow init bt_firmware_file:filesystem { getattr };
allow init apex_metadata_file:lnk_file { read };

1
sepolicy/vendor/netutils_wrapper.te vendored Normal file
View file

@ -0,0 +1 @@
allow netutils_wrapper netutils_wrapper:capability { kill };

3
sepolicy/vendor/qti_init_shell.te vendored
View file

@ -2,6 +2,9 @@ allow qti_init_shell ctl_start_prop:property_service set;
allow qti_init_shell ctl_stop_prop:property_service set;
allow qti_init_shell self:perf_event cpu;
allow qti_init_shell sysfs:file { setattr write };
allow qti_init_shell qti_init_shell:perf_event { cpu };
allow qti_init_shell vendor_default_prop:property_service { set };
allow qti_init_shell system_prop:property_service { set };
dontaudit qti_init_shell system_prop:property_service set;
dontaudit qti_init_shell self:capability { dac_override dac_read_search };

1
sepolicy/vendor/vold.te vendored
View file

@ -1 +1,2 @@
allow vold sysfs_mmc_host:file write;
allow vold vendor_apex_file:file { getattr };

1
sepolicy/vendor/zygote.te vendored Normal file
View file

@ -0,0 +1 @@
allow zygote exported_camera_prop:file { open read getattr write };