summaryrefslogtreecommitdiffstats
path: root/selinux/system_server.te
diff options
context:
space:
mode:
authorCaio Schnepper <caioschnepper@gmail.com>2015-11-12 19:12:06 -0200
committerCaio Schnepper <caioschnepper@gmail.com>2016-01-31 12:21:13 -0800
commit53789b340ccf8ed0208306067c4a55a72a898246 (patch)
treea6d83976d1a17dd2a8494c1e595ea40a1c075a36 /selinux/system_server.te
parent8bb93abd28a48a4108acffd0c617ef13f134f0d3 (diff)
downloaddevice_samsung_galaxys2-common-53789b340ccf8ed0208306067c4a55a72a898246.zip
device_samsung_galaxys2-common-53789b340ccf8ed0208306067c4a55a72a898246.tar.gz
device_samsung_galaxys2-common-53789b340ccf8ed0208306067c4a55a72a898246.tar.bz2
galaxys2-common: Marshmallow SELinux support
This was made from scratch, for a general cleanup of unused policies and update to M guidelines Change-Id: Id4acda2b384d28b5ca51b3ef0f6e93b648c8e79d
Diffstat (limited to 'selinux/system_server.te')
-rw-r--r--selinux/system_server.te13
1 files changed, 8 insertions, 5 deletions
diff --git a/selinux/system_server.te b/selinux/system_server.te
index 5ae729d..5f8321d 100644
--- a/selinux/system_server.te
+++ b/selinux/system_server.te
@@ -1,6 +1,9 @@
-allow system_server uhid_device:chr_file { read write ioctl open };
-allow system_server sysfs_display:file { read write getattr open };
-allow system_server efs_file:dir { search };
-allow system_server efs_file:file { read open write };
+allow system_server efs_file:dir search;
+allow system_server efs_file:file { read open };
allow system_server efs_device_file:dir search;
-allow system_server fuse:dir search;
+allow system_server self:capability sys_module;
+allow system_server system_file:file execmod;
+allow system_server uhid_device:chr_file { read write ioctl open };
+allow system_server recovery_cache_file:dir rmdir;
+allow system_server dex2oat_exec:file { read open execute};
+allow system_server radio_data:dir search;