Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 8e9e444f authored by Bernhard Thoben's avatar Bernhard Thoben
Browse files

kitakami-common: sepolicy: A few little changes. 

Change-Id: I23d1c60712228b6d1f945c8b820ab0f952ef9b03
parent d21521d5

sepolicy/vendor/charger.te

+1 −1
Original line number Diff line number Diff line 
allow charger device:dir r_dir_perms;

allow charger self:capability { dac_override dac_read_search };

allow charger sysfs_battery_supply:file r_file_perms;

allow charger sysfs:file { open read getattr };

allow charger sysfs:file r_file_perms;

allow charger sysfs_usb_supply:file r_file_perms;

sepolicy/vendor/hal_fingerprint_default.te

+0 −1
Original line number Diff line number Diff line
@@ -16,5 +16,4 @@ allow hal_fingerprint_default sysfs_battery_supply:dir search; 
allow hal_fingerprint_default sysfs_battery_supply:file r_file_perms;

allow hal_fingerprint_default system_data_file:dir create_dir_perms;

allow hal_fingerprint_default system_data_file:sock_file create_file_perms;

allow hal_fingerprint_default tee_device:chr_file ioctl;

allow hal_fingerprint_default tee_device:chr_file rw_file_perms;

sepolicy/vendor/init-power-sh.te

+1 −0
Original line number Diff line number Diff line 
# init-power-sh service

type init-power-sh, domain;

type init-power-sh_exec, exec_type, file_type;

sepolicy/vendor/init.te

+1 −1
Original line number Diff line number Diff line
@@ -2,7 +2,7 @@ allow init block_device:blk_file setattr; 
allow init cameraserver:fd use;

allow init debugfs:file w_file_perms;

allow init diag_data_file:dir mounton;

allow init diag_data_file:file { lock rename };

allow init diag_data_file:file create_file_perms;

allow init diag_data_file:sock_file write;

allow init fingerprintd_data_file:file rename;

allow init hal_drm_hwservice:hwservice_manager add;

sepolicy/vendor/loc_launcher.te

+1 −0
Original line number Diff line number Diff line
@@ -2,6 +2,7 @@ 
type loc_launcher, domain;

type loc_launcher_exec, exec_type, file_type;



# Started by init

init_daemon_domain(loc_launcher)



allow loc_launcher location_data_file:dir rw_dir_perms;