MiPad4/android_device_xiaomi_sdm660-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sdm660-common: sepolicy: Address more denials

Browse source
This commit is contained in:
OdSazib 2020-12-09 09:32:15 +06:00
parent 2e38a35b69
commit f2fa84055e
No known key found for this signature in database
GPG key ID: 0954440B60470871
6 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
sepolicy/vendor/gmscore_app.te vendored Normal file
View file

@ -0,0 +1,3 @@
allow gmscore_app blkio_dev:dir search;
allow gmscore_app bt_firmware_file:filesystem getattr;
allow gmscore_app firmware_file:filesystem getattr;

1
sepolicy/vendor/hal_camera_default.te vendored
View file

@ -5,6 +5,7 @@ allow hal_camera_default sysfs:file { getattr open read };
allow hal_camera_default sysfs_kgsl:dir search;
allow hal_camera_default sysfs_kgsl:file r_file_perms;
allow hal_camera_default vendor_video_prop:file r_file_perms;
allow hal_camera_default vendor_default_prop:property_service set;
binder_call(hal_camera_default, hal_configstore_default)
binder_call(hal_camera_default, hal_graphics_allocator_default)

1
sepolicy/vendor/platform_app.te vendored
View file

@ -1 +1,2 @@
allow platform_app blkio_dev:dir search;
allow platform_app sysfs_kgsl:dir search;

1
sepolicy/vendor/priv_app.te vendored Normal file
View file

@ -0,0 +1 @@
allow priv_app blkio_dev:dir search;

1
sepolicy/vendor/property_contexts vendored
View file

@ -46,4 +46,5 @@ persist.sys.thermal. u:object_r:thermal_engine_prop:s0
sys.thermal. u:object_r:thermal_engine_prop:s0
# vendor_default_prop
vendor.camera.cpuperf.en u:object_r:vendor_default_prop:s0
vendor.display.lcd_density u:object_r:vendor_default_prop:s0

1
sepolicy/vendor/system_server.te vendored
View file

@ -1,3 +1,4 @@
allow system_server app_zygote:process getpgid;
allow system_server blkio_dev:dir search;
allow system_server default_android_service:service_manager add;
allow system_server exported_camera_prop:file read;