Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Verified Commit 41e21ef4 authored by steadfasterX's avatar steadfasterX 😁
Browse files

universal7870:selinux: fully fix gyro

parent d02fceda
Loading
Loading
Loading
Loading
+2 −1
Original line number Diff line number Diff line
@@ -101,8 +101,9 @@
/data/gps/nmeapipe                                   u:object_r:gps_data_file:s0

# magnetometer
/data/system/yas_lib.cfg(.tmp)?			u:object_r:gyro_data_file:s0
/data/system/yas_lib(/.*)?			u:object_r:gyro_data_file:s0

# fingerprint
/data/biometrics(/.*)?       u:object_r:fingerprintd_data_file:s0

# camera
+3 −3
Original line number Diff line number Diff line
@@ -6,12 +6,12 @@ allow hal_sensors_default cgroup:file getattr;
allow hal_sensors_default app_efs_file:dir search;
allow hal_sensors_default efs_file:dir search;
allow hal_sensors_default mediaserver_exec:file { getattr read };
allow hal_sensors_default sensor_efs_file:file { open read };
allow hal_sensors_default sensor_efs_file:file { open read write };
allow hal_sensors_default sysfs_input:dir { open read search };
allow hal_sensors_default sysfs_input:file { open read write };
allow hal_sensors_default sysfs_sensors:dir search;
allow hal_sensors_default sysfs_sensors:file { getattr open read write };

# magnetometer
allow hal_sensors_default gyro_data_file:dir { write add_name search };
allow hal_sensors_default gyro_data_file:file { create open read write };
allow hal_sensors_default gyro_data_file:dir { write add_name search remove_name };
allow hal_sensors_default gyro_data_file:file { create open read write getattr rename unlink };
+3 −0
Original line number Diff line number Diff line
@@ -7,6 +7,9 @@ allow vendor_init cache_private_backup_file:dir setattr;
allow vendor_init tmpfs:dir { add_name write };
allow vendor_init cache_backup_file:dir setattr;

# magnetometer
allow vendor_init gyro_data_file:dir { setattr create };

# boot debug
allow vendor_init boot_log_file:dir { create search setattr remove_name write read open ioctl };
allow vendor_init boot_log_file:file unlink;