psmattas/device_motorola_sanders-lineage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sanders: address some denials

Browse Source 
Change-Id: I90239f922aea3b7684b492ea34f137ef31577221
This commit is contained in:
Vachounet
2018-04-02 10:41:10 +02:00
committed by therootlord
parent da902d3674
commit 3f951ce093
3 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
sepolicy/netd.te Normal file
View File

@@ -0,0 +1,2 @@
allow netd untrusted_app_25:unix_stream_socket { read write };

9
sepolicy/untrusted_app.te
View File

@@ -2,3 +2,12 @@ get_prop(untrusted_app, camera_prop);
get_prop(untrusted_app_25, camera_prop);
allow untrusted_app sysfs_zram:dir { search read };
allow untrusted_app sysfs_zram:file { open read getattr };
get_prop(untrusted_app, net_dns_prop);
allow untrusted_app firmware_file:dir read;
allow untrusted_app fsg_file:dir read;
allow untrusted_app net_dns_prop:file read;
allow untrusted_app persist_file:dir getattr;
allow untrusted_app persist_file:filesystem getattr;
allow untrusted_app rootfs:dir read;

4
sepolicy/untrusted_app_25.te
View File

@@ -4,3 +4,7 @@
allow untrusted_app_25 init:unix_stream_socket { read write };
allow untrusted_app_25 proc_stat:file read;
allow untrusted_app_25 qemu_hw_mainkeys_prop:file read;
allow untrusted_app_25 self:udp_socket ioctl;
allow untrusted_app_25 vold_exec:file read;