Sanders : Android Q move to dirty sepolicy[TEMP]

Signed-off-by: ronaxdevil <pratabidya.007@gmail.com>
This commit is contained in:
sai4041412
2019-09-13 08:27:37 +00:00
committed by ronaxdevil
parent e79e5dba49
commit e0139fe66c
45 changed files with 164 additions and 163 deletions

View File

@@ -2,9 +2,9 @@
#binder_call(init, hwservicemanager);
# binder_call(init, servicemanager);
allow init hwservicemanager:binder call;
allow init mm-qcamerad:binder transfer;
allow init platform_app:binder transfer;
#allow init hwservicemanager:binder call;
#allow init mm-qcamerad:binder transfer;
#allow init platform_app:binder transfer;
allow init system_app:binder transfer;
allow init system_data_file:file lock;
@@ -20,10 +20,10 @@ allow init system_server:binder { transfer call };
allow init property_socket:sock_file write;
allow init socket_device:sock_file { create setattr unlink };
allow init system_data_file:file { rename append };
allow init firmware_file:dir mounton;
#allow init system_data_file:file { rename append };
#allow init firmware_file:dir mounton;
allow init fm_radio_device:chr_file write;
#allow init fm_radio_device:chr_file write;
# ptt_socket_app
allow init dnsproxyd_socket:sock_file write;
@@ -31,12 +31,12 @@ allow init netd:unix_stream_socket connectto;
allow init self:netlink_socket { read write getattr connect };
allow init debugfs:file write;
allow init persist_file:filesystem { getattr mount relabelfrom relabelto unmount };
#allow init persist_file:filesystem { getattr mount relabelfrom relabelto unmount };
allow init self:capability sys_nice;
allow init bt_firmware_file:filesystem { associate };
allow init firmware_file:filesystem { associate };
#allow init bt_firmware_file:filesystem { associate };
#allow init firmware_file:filesystem { associate };
allow init sensors_device:chr_file { rw_file_perms create };
@@ -48,6 +48,6 @@ allow init hal_sensors_hwservice:hwservice_manager find;
allow init { domain -lmkd -crash_dump }:process noatsecure;
allow init hal_perf_hwservice:hwservice_manager find;
#allow init hal_perf_hwservice:hwservice_manager find;
allow init hidl_base_hwservice:hwservice_manager add;