sanders: start that treble disaster
This commit is contained in:
21
sepolicy/vendor/mmi_boot.te
vendored
Normal file
21
sepolicy/vendor/mmi_boot.te
vendored
Normal file
@@ -0,0 +1,21 @@
|
||||
type mmi_boot, domain;
|
||||
type mmi_boot_exec, exec_type, vendor_file_type, file_type;
|
||||
init_daemon_domain(mmi_boot)
|
||||
|
||||
binder_use(mmi_boot)
|
||||
binder_service(mmi_boot)
|
||||
binder_call(mmi_boot, system_server)
|
||||
|
||||
# shell scripts need to execute /system/bin/sh
|
||||
allow mmi_boot vendor_shell_exec:file rx_file_perms;
|
||||
allow mmi_boot vendor_toolbox_exec:file rx_file_perms;
|
||||
allow mmi_boot vendor_shell_exec:file entrypoint;
|
||||
|
||||
allow mmi_boot radio_data_file:dir { add_name search write };
|
||||
allow mmi_boot radio_data_file:file { create setattr };
|
||||
allow mmi_boot radio_data_file:file rw_file_perms;
|
||||
allow mmi_boot self:capability chown;
|
||||
allow mmi_boot self:capability dac_override;
|
||||
allow mmi_boot sysfs_socinfo:file write;
|
||||
|
||||
set_prop(mmi_boot, hw_rev_prop);
|
||||
Reference in New Issue
Block a user