android_device_xiaomi_sdm66.../sepolicy/vendor/init_fingerprint.te
Artem Borisov 06d687c9db
sdm660-common: sepolicy: Resolve init_fingerprint denials
Change-Id: Id82f4c6440aeed6a7be6182792c40513102c9f28
Signed-off-by: Akhil Narang <akhilnarang.1999@gmail.com>
2019-08-14 10:04:14 +02:00

14 lines
No EOL
592 B
Text

type init_fingerprint, domain;
type init_fingerprint_exec, exec_type, vendor_file_type, file_type;
# Allow for transition from init domain to init_fingerprint
init_daemon_domain(init_fingerprint)
# Shell script needs to execute /vendor/bin/sh
allow init_fingerprint vendor_shell_exec:file rx_file_perms;
allow init_fingerprint vendor_toolbox_exec:file rx_file_perms;
# Allow to delete file
allow init_fingerprint mnt_vendor_file:dir search;
allow init_fingerprint persist_drm_file:dir { read search open write remove_name };
allow init_fingerprint persist_drm_file:file { getattr unlink };