Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e2f23f0e authored by Steve Kondik's avatar Steve Kondik
Browse files

cm: Fix a few denials

 * Missed a few things when cleaning up devices.

Change-Id: Ib71afd696a564aeeaa80c34ca9744a39891f4b63
parent 100cc8ea
Loading
Loading
Loading
Loading
+5 −0
Original line number Diff line number Diff line
allow bootanim mpctl_socket:dir search;
unix_socket_connect(bootanim, mpctl, perfd)
unix_socket_send(bootanim, mpctl, perfd)

allow bootanim mpdecision:dir search;
allow bootanim mpdecision:file r_file_perms;
unix_socket_connect(bootanim, mpctl, mpdecision)
unix_socket_send(bootanim, mpctl, mpdecision)
+5 −0
Original line number Diff line number Diff line
allow mpdecision sysfs_devices_system_iosched:file rw_file_perms;
unix_socket_connect(mpdecision, thermal, thermal-engine)

# read /proc/pid files
r_dir_file(mpdecision, domain)
+2 −0
Original line number Diff line number Diff line
allow zygote theme_data_file:file r_file_perms;
allow zygote theme_data_file:dir r_dir_perms;

# ps command may do this
allow untrusted_app zygote:process getsched;