ADHOC
/
replicant-vendor_replicant
3
0
Fork 0
Code Issues 6 Pull Requests Releases Activity

cm: sepolicy: Create central place for QC-specific policy 

* We have a number of policy items due to changes in our BSPs or for
   other things which interact with the QC sepolicy. Add a place
   for us to store this stuff so we don't need to copy it around to
   every device.

Change-Id: I155ca202694501d42b42e2bd703d74049d547df0
This commit is contained in:
Steve Kondik 2015-09-15 04:10:02 -07:00 committed by Steve Kondik
parent b5dbbdf9cb
commit b5c2cf0408
4 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sepolicy/qcom/bootanim.te Normal file
View File

@ -0,0 +1,3 @@
allow bootanim mpctl_socket:dir search;
unix_socket_connect(bootanim, mpctl, perfd)
unix_socket_send(bootanim, mpctl, perfd)

6
sepolicy/qcom/perfd.te Normal file
View File

@ -0,0 +1,6 @@
allow perfd sysfs_devices_system_iosched:file rw_file_perms;
unix_socket_connect(perfd, thermal, thermal-engine)
# read mediaserver status
allow perfd mediaserver:file { read open };

2
sepolicy/qcom/sepolicy.mk Normal file
View File

@ -0,0 +1,2 @@
BOARD_SEPOLICY_DIRS += \
vendor/cm/sepolicy/qcom

6
sepolicy/qcom/system_server.te Normal file
View File

@ -0,0 +1,6 @@
# LiveDisplay access to color calibration
allow system_server pps_socket:sock_file rw_file_perms;
allow system_server mm-pp-daemon:unix_stream_socket connectto;
# Time services
allow system_server time_daemon:unix_stream_socket connectto;