Make SELinux policies more 4.4 compatible
Change-Id: I8494f924f1d979fe88eae60ffc118cf34a90184c
This commit is contained in:
parent
e43d6d9042
commit
b67b732a0c
@ -142,10 +142,13 @@ BOARD_SEPOLICY_DIRS += \
|
||||
|
||||
BOARD_SEPOLICY_UNION += \
|
||||
device.te \
|
||||
drmserver.te \
|
||||
ueventd.te \
|
||||
domain.te \
|
||||
file.te \
|
||||
file_contexts \
|
||||
rild.te
|
||||
rild.te \
|
||||
vold.te
|
||||
|
||||
# Recovery
|
||||
BOARD_CUSTOM_RECOVERY_KEYMAPPING := ../../device/samsung/galaxys2-common/recovery/recovery_keys.c
|
||||
|
@ -1,3 +1,2 @@
|
||||
type mali_device, dev_type, mlstrustedobject;
|
||||
type rfkill_device, dev_type;
|
||||
type efs_block_device, dev_type;
|
||||
|
@ -1,6 +1,3 @@
|
||||
## /dev/mali, /dev/ump
|
||||
allow domain mali_device:chr_file rw_file_perms;
|
||||
|
||||
## /dev/rfkill for wpa_supp
|
||||
allow wpa rfkill_device:chr_file rw_file_perms;
|
||||
|
||||
|
1
selinux/drmserver.te
Normal file
1
selinux/drmserver.te
Normal file
@ -0,0 +1 @@
|
||||
allow drmserver sdcard_external:file open;
|
@ -1,7 +1,7 @@
|
||||
# GFX
|
||||
/dev/mali u:object_r:mali_device:s0
|
||||
/dev/ump u:object_r:mali_device:s0
|
||||
/dev/fimg2d u:object_r:mali_device:s0
|
||||
/dev/mali u:object_r:graphics_device:s0
|
||||
/dev/ump u:object_r:graphics_device:s0
|
||||
/dev/fimg2d u:object_r:graphics_device:s0
|
||||
|
||||
# RIL
|
||||
/dev/umts_boot0 u:object_r:radio_device:s0
|
||||
|
2
selinux/ueventd.te
Normal file
2
selinux/ueventd.te
Normal file
@ -0,0 +1,2 @@
|
||||
allow ueventd sdcard_external:dir search;
|
||||
allow ueventd sdcard_external:file r_file_perms;
|
1
selinux/vold.te
Normal file
1
selinux/vold.te
Normal file
@ -0,0 +1 @@
|
||||
allow vold sdcard_external:file rw_file_perms;
|
Loading…
Reference in New Issue
Block a user