Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e2f23f0e authored by Steve Kondik's avatar Steve Kondik
Browse files

cm: Fix a few denials 

 * Missed a few things when cleaning up devices.

Change-Id: Ib71afd696a564aeeaa80c34ca9744a39891f4b63
parent 100cc8ea

sepolicy/qcom/bootanim.te

+5 −0
Original line number Diff line number Diff line 
allow bootanim mpctl_socket:dir search;

unix_socket_connect(bootanim, mpctl, perfd)

unix_socket_send(bootanim, mpctl, perfd)



allow bootanim mpdecision:dir search;

allow bootanim mpdecision:file r_file_perms;

unix_socket_connect(bootanim, mpctl, mpdecision)

unix_socket_send(bootanim, mpctl, mpdecision)

sepolicy/qcom/mpdecision.te

0 → 100644
+5 −0
Original line number Diff line number Diff line 
allow mpdecision sysfs_devices_system_iosched:file rw_file_perms;

unix_socket_connect(mpdecision, thermal, thermal-engine)



# read /proc/pid files

r_dir_file(mpdecision, domain)

sepolicy/zygote.te

+2 −0
Original line number Diff line number Diff line 
allow zygote theme_data_file:file r_file_perms;

allow zygote theme_data_file:dir r_dir_perms;



# ps command may do this

allow untrusted_app zygote:process getsched;