diff --git a/sepolicy/vendor/fsck_untrusted.te b/sepolicy/vendor/fsck_untrusted.te index 4149f497..43e0202d 100644 --- a/sepolicy/vendor/fsck_untrusted.te +++ b/sepolicy/vendor/fsck_untrusted.te @@ -1 +1,2 @@ allow fsck_untrusted sysfs:file { getattr }; +dontaudit fsck_untrusted sysfs:file { read }; \ No newline at end of file diff --git a/sepolicy/vendor/hal_bluetooh_qti.te b/sepolicy/vendor/hal_bluetooh_qti.te deleted file mode 100644 index 9f6f810f..00000000 --- a/sepolicy/vendor/hal_bluetooh_qti.te +++ /dev/null @@ -1 +0,0 @@ -allow hal_bluetooth_qti self:qipcrtr_socket create; diff --git a/sepolicy/vendor/hal_bluetooth_qti.te b/sepolicy/vendor/hal_bluetooth_qti.te index ebf5fbcf..d4111a49 100644 --- a/sepolicy/vendor/hal_bluetooth_qti.te +++ b/sepolicy/vendor/hal_bluetooth_qti.te @@ -1,2 +1,5 @@ allow hal_bluetooth_qti diag_device:chr_file rw_file_perms; allow hal_bluetooth_qti ramdump_vendor_data_file:dir rw_dir_perms; +allow hal_bluetooth_qti self:qipcrtr_socket create; + +get_prop(hal_bluetooth_qti, hal_bluetooth_qti_prop) diff --git a/sepolicy/vendor/property.te b/sepolicy/vendor/property.te index 6255d221..92ff86bc 100644 --- a/sepolicy/vendor/property.te +++ b/sepolicy/vendor/property.te @@ -5,3 +5,4 @@ vendor_restricted_prop(vendor_camera_prop); vendor_internal_prop(dirac_prop); vendor_internal_prop(vendor_power_prop) vendor_internal_prop(thermal_engine_prop); +vendor_public_prop(hal_bluetooth_qti_prop); diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts index dc46340b..47b4a0d4 100644 --- a/sepolicy/vendor/property_contexts +++ b/sepolicy/vendor/property_contexts @@ -6,6 +6,9 @@ audio_hal.period_multiplier u:object_r:vendor_default_prop:s0 persist.audio.fluence.voicecomm u:object_r:vendor_default_prop:s0 ro.audio.usb.period_us u:object_r:vendor_default_prop:s0 +# Bluetooth +ro.hsm.model.num u:object_r:hal_bluetooth_qti_prop:s0 + # Camera camera.clientname u:object_r:vendor_camera_prop:s0 camera.cpp.dumpvideopayload u:object_r:vendor_camera_prop:s0