samsung_sm8750/android_device_samsung_sm8750-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sm8550-common: sepolicy: Address more denials

Browse Source 
Change-Id: Id833dcd57dc9d389ef57cc30b85897f9d98f3c56
This commit is contained in:
chaptsand
2025-03-28 20:35:20 +08:00
parent 9cfb921e7d
commit 7f9b3e8c7d
6 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
sepolicy/vendor/file.te vendored
View File

@@ -30,6 +30,7 @@ type proc_bus_input, fs_type, proc_type;
type vendor_sysfs_input, fs_type, sysfs_type; type vendor_sysfs_input, fs_type, sysfs_type;
# Proc # Proc
type proc_last_kmsg, fs_type, proc_type;
type proc_simslot_count, fs_type, proc_type; type proc_simslot_count, fs_type, proc_type;
# Qms # Qms

1
sepolicy/vendor/genfs_contexts vendored
View File

@@ -1,4 +1,5 @@
# Proc # Proc
genfscon proc "/last_kmsg" u:object_r:proc_last_kmsg:s0
genfscon proc "/simslot_count" u:object_r:proc_simslot_count:s0 genfscon proc "/simslot_count" u:object_r:proc_simslot_count:s0
# Audio # Audio

2
sepolicy/vendor/network_stack.te vendored
View File

@@ -1,2 +1,2 @@
# Allow network_stack to read proc_net file # Allow network_stack to read proc_net file
allow network_stack proc_net:file rw_file_perms; allow network_stack proc_net:file { read getattr open };

2
sepolicy/vendor/spdaemon.te vendored Normal file
View File

@@ -0,0 +1,2 @@
# Allow vendor_spdaemon to find hal_system_suspend_service
allow vendor_spdaemon hal_system_suspend_service:service_manager find;

2
sepolicy/vendor/system_server.te vendored Normal file
View File

@@ -0,0 +1,2 @@
# Allow system_server process to read /proc/last_kmsg
allow system_server proc_last_kmsg:file r_file_perms;

3
sepolicy/vendor/vendor_init.te vendored
View File

@@ -5,3 +5,6 @@ allow vendor_init cgroup:file rw_file_perms;
allow vendor_init block_device:lnk_file setattr; allow vendor_init block_device:lnk_file setattr;
allow vendor_init vendor_ssr_prop:property_service set; allow vendor_init vendor_ssr_prop:property_service set;
# Allow vendor_init to set vendor_thermal_prop properties
allow vendor_init vendor_thermal_prop:property_service set;