diff --git a/sepolicy/pirvate/system_app.te b/sepolicy/pirvate/system_app.te new file mode 100644 index 0000000000000000000000000000000000000000..a824431df1f1ab96de05ade5786b8c6e44c5dce4 --- /dev/null +++ b/sepolicy/pirvate/system_app.te @@ -0,0 +1,4 @@ +allow system_app sysfs_zram:dir search; +allow system_app sysfs_zram:file rw_file_perms; +allow system_app proc_pagetypeinfo:file r_file_perms; + diff --git a/sepolicy/vendor/hal_secure_element_default.te b/sepolicy/vendor/hal_secure_element_default.te new file mode 100644 index 0000000000000000000000000000000000000000..9d9f821f04e4f3c3eb86f27da794ed8cc6b53e5f --- /dev/null +++ b/sepolicy/vendor/hal_secure_element_default.te @@ -0,0 +1,3 @@ +dontaudit hal_secure_element_default debugfs_ipc:dir search; +get_prop(hal_secure_element_default, persist_nfc_prop) +hal_client_domain(hal_secure_element_default, hal_nfc); diff --git a/sepolicy/vendor/hwservice_contexts b/sepolicy/vendor/hwservice_contexts index 04917f82eb4f4b0411b498c70ac7f9693c343e25..63905a7a1e263cfa8c6fcbd01ce22a551d1b2621 100644 --- a/sepolicy/vendor/hwservice_contexts +++ b/sepolicy/vendor/hwservice_contexts @@ -7,6 +7,8 @@ vendor.nxp.nxpwiredse::INxpWiredSe u:obj vendor.oneplus.camera.CameraHIDL::IOnePlusCameraProvider u:object_r:hal_cameraHIDL_hwservice:s0 vendor.oneplus.camera.CameraMDMHIDL::IOnePlusCameraMDM u:object_r:hal_cameraHIDL_hwservice:s0 vendor.oneplus.fingerprint.extension::IVendorFingerprintExtensions u:object_r:hal_fingerprint_hwservice:s0 +vendor.oneplus.hardware.camera::IOnePlusCameraProvider u:object_r:hal_cameraHIDL_hwservice:s0 +vendor.oneplus.hardware.CameraMDMHIDL::IOnePlusCameraMDM u:object_r:hal_cameraHIDL_hwservice:s0 vendor.oneplus.hardware.display::IOneplusDisplay u:object_r:hal_display_hwservice:s0 vendor.oneplus.hardware.drmkey::IOneplusDrmKey u:object_r:hal_drmkey_hwservice:s0 vendor.oneplus.hardware.ifaa::IOneplusIfaa u:object_r:hal_ifaa_hwservice:s0 diff --git a/sepolicy/vendor/kernel.te b/sepolicy/vendor/kernel.te index ede180b51044220b45e1fe357525c646c0e4cb52..3dfe90fd3f623ee05cf0c214c42046ae7001c74b 100644 --- a/sepolicy/vendor/kernel.te +++ b/sepolicy/vendor/kernel.te @@ -11,3 +11,6 @@ allow kernel oem_block_device:blk_file rw_file_perms; # Allow kernel to read and write to param_block_device allow kernel param_block_device:blk_file rw_file_perms; + +# Allow kernel to read and write to block device +allow kernel block_device:blk_file rw_file_perms; diff --git a/sepolicy/vendor/secure_element.te b/sepolicy/vendor/secure_element.te new file mode 100644 index 0000000000000000000000000000000000000000..9d8ebc5091a26971fee25a42a161797d0702ccd8 --- /dev/null +++ b/sepolicy/vendor/secure_element.te @@ -0,0 +1 @@ +get_prop(secure_element, vendor_nfc_prop)