sanders: start that treble disaster

This commit is contained in:
Vachounet
2018-05-15 10:32:56 +02:00
committed by therootlord
parent 2d7fc638e6
commit e8de4d1208
75 changed files with 73 additions and 34 deletions

17
sepolicy/vendor/charge_only.te vendored Normal file
View File

@@ -0,0 +1,17 @@
type charge_only, domain;
type charge_only_exec, exec_type, file_type;
init_daemon_domain(charge_only)
allow charge_only chargeonly_data_file:dir rw_dir_perms;
allow charge_only chargeonly_data_file:file rw_file_perms;
allow charge_only graphics_device:chr_file rw_file_perms;
allow charge_only graphics_device:dir search;
allow charge_only input_device:chr_file r_file_perms;
allow charge_only input_device:dir search;
allow charge_only self:capability { dac_override net_admin sys_tty_config sys_boot };
allow charge_only self:netlink_kobject_uevent_socket { bind read setopt create };
allow charge_only sysfs:dir { read open };
allow charge_only sysfs:file { read open write };
allow charge_only sysfs_wake_lock:file rw_file_perms;
allow charge_only system_data_file:dir { write add_name };
allow charge_only tty_device:chr_file rw_file_perms;