sdm660-common: sepolicy: address newly discovered denials
Signed-off-by: pix106 <sbordenave@gmail.com>
This commit is contained in:
parent
1f8bba423f
commit
e9aa976c93
2 changed files with 2 additions and 0 deletions
1
sepolicy/vendor/hal_fingerprint_sdm660.te
vendored
1
sepolicy/vendor/hal_fingerprint_sdm660.te
vendored
|
@ -23,6 +23,7 @@ allow hal_fingerprint_sdm660 sysfs_devfreq:dir search;
|
|||
allow hal_fingerprint_sdm660 sysfs_devfreq:file r_file_perms;
|
||||
allow hal_fingerprint_sdm660 mnt_vendor_file:dir search;
|
||||
allow hal_fingerprint_sdm660 mnt_vendor_file:file r_file_perms;
|
||||
allow hal_fingerprint_sdm660 persist_drm_file:dir rw_dir_perms;
|
||||
|
||||
binder_call(hal_fingerprint_sdm660, hal_perf_default)
|
||||
r_dir_file(hal_fingerprint_sdm660, firmware_file)
|
||||
|
|
1
sepolicy/vendor/system_server.te
vendored
1
sepolicy/vendor/system_server.te
vendored
|
@ -3,5 +3,6 @@ get_prop(system_server, userspace_reboot_exported_prop)
|
|||
allow system_server app_zygote:process getpgid;
|
||||
allow system_server blkio_dev:dir search;
|
||||
allow system_server sysfs_battery_supply:file rw_file_perms;
|
||||
allow system_server sysfs_livedisplay_tuneable:file rw_file_perms;
|
||||
|
||||
dontaudit system_server sysfs:file { read open getattr };
|
||||
|
|
Loading…
Reference in a new issue