diff options
| author | RGIB <gibellini.roberto@gmail.com> | 2016-04-04 16:23:21 +0200 |
|---|---|---|
| committer | Roberto Gibellini <gibellini.roberto@gmail.com> | 2016-04-05 14:32:20 -0700 |
| commit | db70d22263602fb90fffdfa277eff287c3fee757 (patch) | |
| tree | a1aca3140c3d7e44959e7567bf9a7304ad116838 /selinux/cpboot-daemon.te | |
| parent | f29e5e4bf0661a744456580ec17033170eee4aa5 (diff) | |
| download | device_samsung_kona-common-db70d22263602fb90fffdfa277eff287c3fee757.zip device_samsung_kona-common-db70d22263602fb90fffdfa277eff287c3fee757.tar.gz device_samsung_kona-common-db70d22263602fb90fffdfa277eff287c3fee757.tar.bz2 | |
kona : MM sepolicy
Change-Id: Ib7816ea15871cc75d8cd68a5d0cbcf5e6fe66c18
Diffstat (limited to 'selinux/cpboot-daemon.te')
| -rw-r--r-- | selinux/cpboot-daemon.te | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/selinux/cpboot-daemon.te b/selinux/cpboot-daemon.te new file mode 100644 index 0000000..c4e592f --- /dev/null +++ b/selinux/cpboot-daemon.te @@ -0,0 +1,18 @@ +type cpboot-daemon, domain; +type cpboot-daemon_exec, exec_type, file_type; +init_daemon_domain(cpboot-daemon) +domain_trans(init, rootfs, cpboot-daemon) + +dontaudit cpboot-daemon usbfs:dir search; +dontaudit cpboot-daemon usbfs:filesystem mount; + +allow cpboot-daemon cgroup:dir { create add_name }; +allow cpboot-daemon efs_file:file { read write open }; +allow cpboot-daemon init:unix_stream_socket connectto; +allow cpboot-daemon property_socket:sock_file write; +allow cpboot-daemon radio_device:chr_file { read write ioctl open }; +allow cpboot-daemon radio_prop:property_service set; +allow cpboot-daemon self:capability { setuid dac_override }; +allow cpboot-daemon sysfs:file write; +allow cpboot-daemon userdata_block_device:blk_file { read open }; +allow cpboot-daemon efs_file:dir search; |