Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 7303ea1f authored by Sooraj S's avatar Sooraj S 👽
Browse files

FP3: address few selinux denials

parent 862b7baf

BoardConfig.mk

+2 −1
Original line number Diff line number Diff line
@@ -248,8 +248,9 @@ TARGET_USES_NQ_NFC := true 
TARGET_PROVIDES_LIBLIGHT := true



# SELinux

include device/qcom/sepolicy/sepolicy.mk

include device/qcom/sepolicy-legacy-um/sepolicy.mk

BOARD_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/vendor

BOARD_PLAT_PRIVATE_SEPOLICY_DIR += $(DEVICE_PATH)/sepolicy/private



# Soong namespaces

PRODUCT_SOONG_NAMESPACES += $(DEVICE_PATH)

sepolicy/private/system_app.te

0 → 100644
+2 −0
Original line number Diff line number Diff line 
binder_call(system_app, storaged)

binder_call(system_app, system_suspend)
 
 No newline at end of file

sepolicy/vendor/cnd.te

0 → 100644
+1 −0
Original line number Diff line number Diff line 
add_hwservice(cnd, hal_datafactory_hwservice)

sepolicy/vendor/genfs_contexts

0 → 100644
+2 −0
Original line number Diff line number Diff line 
# Real-time clock

genfscon sysfs /devices/soc/qpnp-rtc-8/rtc                              u:object_r:sysfs_rtc:s0

sepolicy/vendor/hal_audio_default.te

0 → 100644
+2 −0
Original line number Diff line number Diff line 
# This is horrible but for some reason the audio HAL wants to read all devices

r_dir_file(hal_audio_default, sysfs)