ADHOC/replicant-vendor_replicant
3
0
Fork 0
Code Issues 6 Pull Requests Releases Activity

cm: Fix a few denials

Browse Source 
* Missed a few things when cleaning up devices.

Change-Id: Ib71afd696a564aeeaa80c34ca9744a39891f4b63
This commit is contained in:
Steve Kondik 2015-09-19 22:49:20 -07:00
parent 100cc8ea1b
commit e2f23f0e91
3 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sepolicy/qcom/bootanim.te
View File

@ -1,3 +1,8 @@
allow bootanim mpctl_socket:dir search;
unix_socket_connect(bootanim, mpctl, perfd)
unix_socket_send(bootanim, mpctl, perfd)
allow bootanim mpdecision:dir search;
allow bootanim mpdecision:file r_file_perms;
unix_socket_connect(bootanim, mpctl, mpdecision)
unix_socket_send(bootanim, mpctl, mpdecision)

5
sepolicy/qcom/mpdecision.te Normal file
View File

@ -0,0 +1,5 @@
allow mpdecision sysfs_devices_system_iosched:file rw_file_perms;
unix_socket_connect(mpdecision, thermal, thermal-engine)
# read /proc/pid files
r_dir_file(mpdecision, domain)

2
sepolicy/zygote.te
View File

@ -1,3 +1,5 @@
allow zygote theme_data_file:file r_file_perms;
allow zygote theme_data_file:dir r_dir_perms;
# ps command may do this
allow untrusted_app zygote:process getsched;