cm: sepolicy: Create standard policy for LiveDisplay

Change-Id: Icb0047f261861c8fae99ffa4e9053de8d3aa8c73
This commit is contained in:
Steve Kondik 2015-09-15 04:09:03 -07:00 committed by Steve Kondik
parent 9cfe968a73
commit b5dbbdf9cb
4 changed files with 12 additions and 0 deletions

View File

@ -14,3 +14,6 @@ type recovery_cache_file, file_type, mlstrustedobject;
# Persistent property storage
type persist_property_file, file_type;
# Knobs for LiveDisplay
type livedisplay_sysfs, sysfs_type, file_type;

View File

@ -37,3 +37,9 @@
# Persistent properties
/persist/properties u:object_r:persist_property_file:s0
# LiveDisplay
/sys/devices/virtual/graphics/fb0/aco u:object_r:livedisplay_sysfs:s0
/sys/devices/virtual/graphics/fb0/cabc u:object_r:livedisplay_sysfs:s0
/sys/devices/virtual/graphics/fb0/rgb u:object_r:livedisplay_sysfs:s0
/sys/devices/virtual/graphics/fb0/sre u:object_r:livedisplay_sysfs:s0

2
sepolicy/livedisplay.te Normal file
View File

@ -0,0 +1,2 @@
# Various knobs used by LiveDisplay
allow system_server livedisplay_sysfs:file rw_file_perms;

View File

@ -21,6 +21,7 @@ BOARD_SEPOLICY_UNION += \
healthd.te \
hostapd.te \
installd.te \
livedisplay.te \
mediaserver.te \
netd.te \
property.te \