diff options
| author | Caio Schnepper <caioschnepper@gmail.com> | 2015-11-12 19:12:06 -0200 |
|---|---|---|
| committer | Caio Schnepper <caioschnepper@gmail.com> | 2016-01-31 12:21:13 -0800 |
| commit | 53789b340ccf8ed0208306067c4a55a72a898246 (patch) | |
| tree | a6d83976d1a17dd2a8494c1e595ea40a1c075a36 /selinux/cpboot-daemon.te | |
| parent | 8bb93abd28a48a4108acffd0c617ef13f134f0d3 (diff) | |
| download | device_samsung_galaxys2-common-53789b340ccf8ed0208306067c4a55a72a898246.zip device_samsung_galaxys2-common-53789b340ccf8ed0208306067c4a55a72a898246.tar.gz device_samsung_galaxys2-common-53789b340ccf8ed0208306067c4a55a72a898246.tar.bz2 | |
galaxys2-common: Marshmallow SELinux support
This was made from scratch, for a general cleanup of unused policies
and update to M guidelines
Change-Id: Id4acda2b384d28b5ca51b3ef0f6e93b648c8e79d
Diffstat (limited to 'selinux/cpboot-daemon.te')
| -rw-r--r-- | selinux/cpboot-daemon.te | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/selinux/cpboot-daemon.te b/selinux/cpboot-daemon.te new file mode 100644 index 0000000..ef49102 --- /dev/null +++ b/selinux/cpboot-daemon.te @@ -0,0 +1,23 @@ +type cpboot-daemon, domain; + +permissive cpboot-daemon; + +allow cpboot-daemon cgroup:dir { create add_name }; +allow cpboot-daemon device:dir { write remove_name add_name }; +allow cpboot-daemon efs_block_device:blk_file { read open }; +allow cpboot-daemon efs_device_file:dir search; +allow cpboot-daemon efs_file:file { read write open }; +allow cpboot-daemon init:unix_stream_socket connectto; +allow cpboot-daemon log_device:chr_file { write open }; +allow cpboot-daemon log_device:dir search; +allow cpboot-daemon property_socket:sock_file write; +allow cpboot-daemon radio_device:chr_file { read write ioctl open }; +allow cpboot-daemon radio_prop:property_service set; +allow cpboot-daemon self:capability { setuid }; +allow cpboot-daemon sysfs_radio:file { read write open }; +allow cpboot-daemon usbfs:dir search; + + +# FIX ME +# allow cpboot-daemon usbfs:filesystem mount; +# allow cpboot-daemon self:capability { mknod }; |