sanders: sepol: update sepolicy

-ref: https://github.com/crdroidandroid/android_device_motorola_sanders/tree/10.0-20200126

Signed-off-by: ronaxdevil <pratabidya.007@gmail.com>
This commit is contained in:
ronaxdevil
2020-03-26 10:26:49 +05:30
committed by ArmSM
parent e4a48bc271
commit 63a775260b
79 changed files with 399 additions and 267 deletions

View File

@@ -1,8 +1,13 @@
#get_prop(thermal-engine, diag_prop)
#allow thermal-engine socket_device:sock_file { create setattr };
#allow thermal-engine sysfs_rmt_storage:dir search;
#allow thermal-engine sysfs_rmt_storage:file r_file_perms;
#allow thermal-engine sysfs_uio:file r_file_perms;
#allow thermal-engine sysfs_uio:dir { read open search };
#allow thermal-engine sysfs_uio:lnk_file { read };
#allow thermal-engine sysfs_vadc_dev:lnk_file { read open };
get_prop(thermal-engine, diag_prop)
allow thermal-engine socket_device:sock_file { create setattr };
allow thermal-engine sysfs_rmt_storage:dir search;
allow thermal-engine sysfs_rmt_storage:file r_file_perms;
allow thermal-engine sysfs_uio:file r_file_perms;
allow thermal-engine sysfs_uio:dir { read open search };
allow thermal-engine sysfs_uio:lnk_file { read };
allow thermal-engine sysfs_vadc_dev:lnk_file { read open };
allow thermal-engine self:capability { dac_override dac_read_search };
allow thermal-engine sysfs_vadc_dev:dir search;
allow thermal-engine sysfs:file { read write getattr };
allow thermal-engine sysfs:dir read;