From fb4b3cc9c3fba7d549315a585fda7d16411c61d6 Mon Sep 17 00:00:00 2001 From: Caio Schnepper Date: Fri, 13 May 2016 15:07:47 -0300 Subject: galaxys2-common: Address SELinux denials Change-Id: I1072412370389554d7893ca38d62fd66aa331d48 --- selinux/file_contexts | 1 - selinux/init.te | 1 + selinux/platform_app.te | 2 ++ 3 files changed, 3 insertions(+), 1 deletion(-) create mode 100644 selinux/platform_app.te diff --git a/selinux/file_contexts b/selinux/file_contexts index b1e79f2..07b8514 100644 --- a/selinux/file_contexts +++ b/selinux/file_contexts @@ -45,7 +45,6 @@ # Firmwares /system/vendor/firmware/mfc_fw.bin u:object_r:firmware_mfc:s0 - # Display /sys/devices/platform/samsung-pd.2/mdnie/mdnie/mdnie/scenario u:object_r:sysfs_display:s0 /sys/devices/platform/samsung-pd.2/mdnie/mdnie/mdnie/mode u:object_r:sysfs_display:s0 diff --git a/selinux/init.te b/selinux/init.te index 6b18583..2a23be5 100644 --- a/selinux/init.te +++ b/selinux/init.te @@ -1,4 +1,5 @@ allow init self:capability sys_module; allow init tmpfs:lnk_file create; allow init rild:process noatsecure; +allow init debugfs:dir mounton; domain_trans(init, rootfs, cpboot-daemon) diff --git a/selinux/platform_app.te b/selinux/platform_app.te new file mode 100644 index 0000000..84de19f --- /dev/null +++ b/selinux/platform_app.te @@ -0,0 +1,2 @@ +allow platform_app battery_service:service_manager find; +allow platform_app healthd_service:service_manager find; -- cgit v1.1