diff --git a/sepolicy/logd.te b/sepolicy/logd.te new file mode 100644 index 0000000..604c7dd --- /dev/null +++ b/sepolicy/logd.te @@ -0,0 +1 @@ +allow logd self:capability dac_override; diff --git a/sepolicy/rild.te b/sepolicy/rild.te index 0adfd16..e6a5d96 100644 --- a/sepolicy/rild.te +++ b/sepolicy/rild.te @@ -1,9 +1,10 @@ -allow rild fsg_file:file r_file_perms; -allow rild persist_file:dir search; -allow rild persist_file:file rw_file_perms; - allow rild cutback_data_file:dir rw_dir_perms; allow rild cutback_data_file:sock_file create_file_perms; +allow rild fsg_file:file r_file_perms; +allow rild fsg_file:dir r_dir_perms; +allow rild fsg_file:lnk_file read; +allow rild persist_file:dir search; +allow rild persist_file:file rw_file_perms; allow rild sensorservice_service:service_manager find; allow rild system_server:binder { transfer call }; allow rild system_server:unix_stream_socket { read getopt write }; diff --git a/sepolicy/wpa.te b/sepolicy/wpa.te index cb68bd2..eeb7b7f 100644 --- a/sepolicy/wpa.te +++ b/sepolicy/wpa.te @@ -1,2 +1,3 @@ -allow wpa cutback_data_file:sock_file write; +allow wpa cutback_data_file:dir rw_dir_perms; +allow wpa cutback_data_file:sock_file rw_file_perms; allow wpa rild:unix_dgram_socket sendto;