sanders: sepol: update sepolicy

-ref: https://github.com/crdroidandroid/android_device_motorola_sanders/tree/10.0-20200126

Signed-off-by: ronaxdevil <pratabidya.007@gmail.com>
This commit is contained in:
ronaxdevil
2020-03-26 10:26:49 +05:30
committed by ArmSM
parent e4a48bc271
commit 63a775260b
79 changed files with 399 additions and 267 deletions

View File

@@ -2,10 +2,18 @@ allow hal_fingerprint_default sysfs_fpc:file rw_file_perms;
allow hal_fingerprint_default sysfs_fpc:dir r_dir_perms;
allow hal_fingerprint_default fpc_data_file:dir rw_dir_perms;
allow hal_fingerprint_default tee_device:chr_file rw_file_perms;
#allow hal_fingerprint_default firmware_file:dir search;
#allow hal_fingerprint_default firmware_file:file r_file_perms;
#allow hal_fingerprint_default sysfs_graphics:dir r_dir_perms;
#allow hal_fingerprint_default sysfs_graphics:file r_file_perms;
allow hal_fingerprint_default firmware_file:dir search;
allow hal_fingerprint_default firmware_file:file r_file_perms;
allow hal_fingerprint_default sysfs_graphics:dir r_dir_perms;
allow hal_fingerprint_default sysfs_graphics:file r_file_perms;
allow hal_fingerprint_default sysfs_leds:dir r_dir_perms;
allow hal_fingerprint_default sysfs_leds:file r_file_perms;
allow hal_fingerprint_default uhid_device:chr_file rw_file_perms;
allow hal_fingerprint_default default_android_hwservice:hwservice_manager { add };
allow hal_fingerprint_default unlabeled:dir search;
allow hal_fingerprint_default unlabeled:file { getattr open read };
allow hal_fingerprint_default fingerprintd_data_file:dir { add_name getattr remove_name search write };
allow hal_fingerprint_default system_data_file:dir { add_name getattr create write };
allow hal_fingerprint_default system_data_file:file create;
allow hal_fingerprint_default fingerprintd_data_file:file { getattr rename unlink };