Verified Commit d36feb36 authored by steadfasterX's avatar steadfasterX 😁
Browse files

universal7870: selinux: fix gps/gnss


Signed-off-by: steadfasterX's avatarsteadfasterX <steadfasterX@gmail.com>
parent 17998757
......@@ -56,6 +56,9 @@
# Knox status
/dev/knox_kap u:object_r:knox_device:s0
# gnss
/dev/gnss_ipc u:object_r:gps_device:s0
# audio hal
/dev/i2c-20 u:object_r:audio_device:s0
......
type gpsd, domain, netdomain;
type gpsd_exec, exec_type, vendor_file_type, file_type;
# accessing gnss device
type gnss_device, dev_type;
# gpsd is started by init, type transit from init domain to gpsd domain
init_daemon_domain(gpsd)
......@@ -34,3 +37,7 @@ allow gpsd fwmarkd_socket:sock_file write;
allow gpsd gps_vendor_data_file:dir rw_dir_perms;
allow gpsd gps_vendor_data_file:file create_file_perms;
allow gpsd gps_vendor_data_file:fifo_file create_file_perms;
allow gpsd sysfs_gps:file { open read getattr };
allow gpsd sysfs_wake_lock:file { open write };
allow gpsd gps_device:chr_file { read write open ioctl };
......@@ -14,3 +14,4 @@ allow hal_gnss_default mnt_vendor_file:dir search;
#allow hal_gnss_default default_android_hwservice:hwservice_manager { add find };
allow hal_gnss_default fwk_sensor_hwservice:hwservice_manager find;
allow hal_gnss_default init:unix_stream_socket connectto;
allow hal_gnss_default gpsd:unix_stream_socket connectto;
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment