android_device_xiaomi_sdm66.../sepolicy/vendor/vendor_init.te
OdSazib 9a192b7de0
sdm660-common: sepolicy: Update sepolicy and cleanup
* Address some denials from android 11
* Fix video recording
* Sort in alphabetic order

Signed-off-by: OdSazib <odsazib@gmail.com>
2020-12-21 09:16:25 +06:00

36 lines
1.1 KiB
Text

#============= vendor_init ==============
typeattribute vendor_init data_between_core_and_vendor_violators;
allow vendor_init {
media_rw_data_file
system_data_file
tombstone_data_file
camera_data_file
}:dir { create search getattr open read setattr ioctl write add_name remove_name rmdir relabelfrom };
allow vendor_init fingerprint_data_file:dir {setattr create};
allow vendor_init media_rw_data_file:file { getattr relabelfrom };
allow vendor_init persist_debug_prop:file read;
allow vendor_init rootfs:dir { add_name create setattr write };
allow vendor_init rootfs:lnk_file setattr;
allow vendor_init unlabeled:{ dir file } { getattr relabelfrom };
allow vendor_init blkio_dev:file { open read write create };
allow vendor_init proc_dirty:file write;
allow vendor_init {
audio_prop
bservice_prop
persist_debug_prop
vendor_persist_dpm_prop
qcom_ims_prop
reschedule_service_prop
thermal_engine_prop
vendor_ssr_prop
vendor_fp_prop
}:property_service set;
set_prop(vendor_init, camera_prop)
set_prop(vendor_init, exported_camera_prop)
set_prop(vendor_init, vendor_camera_prop)
set_prop(vendor_init, freq_prop)
set_prop(vendor_init, fm_prop)