This repository has been archived on 2025-09-03. You can view files and clone it. You cannot open issues or pull requests or push a commit.
Files
device_oneplus_sm7250-common/sepolicy/vendor/untrusted_app.te
revolwoc 850517a1cd sm7250-common:address some denials
Signed-off-by: revolwoc <imsakshisharma04@gmail.com>
Signed-off-by: Sandeep-FED <sandymankara11@gmail.com>
2023-01-05 22:11:07 +05:30

20 lines
904 B
Plaintext

allow untrusted_app zygote:unix_stream_socket getopt;
allow untrusted_app vendor_xdsp_device:chr_file ioctl;
allow untrusted_app app_data_file:file execute;
allow untrusted_app proc_stat:file open;
allow untrusted_app vendor_hal_camera_postproc_hwservice:hwservice_manager find;
allow untrusted_app app_data_file:file execute;
allow untrusted_app proc_pid_max:file read;
allow untrusted_app proc_max_map_count:file { getattr open read };
allow untrusted_app proc_version:file { getattr open read };
allow untrusted_app proc_zoneinfo:file { getattr open read };
allow untrusted_app vendor_file:file { execute getattr map open read };
# dontaudit
dontaudit untrusted_app proc_zoneinfo: file { read };
dontaudit untrusted_app system_lib_file:file { execmod };
dontaudit untrusted_app proc_version:file { read };
allow untrusted_app proc_net_tcp_udp:file { read };
allow untrusted_app rootfs:dir { read };