diff options
| author | tilaksidduram <tilaksidduram@gmail.com> | 2015-12-21 21:36:04 +0530 |
|---|---|---|
| committer | tilaksidduram <tilaksidduram@gmail.com> | 2015-12-22 19:54:22 +0530 |
| commit | 0bf7364ac512f26be0373bf8810bd5c2cdc5c99d (patch) | |
| tree | 10bcaf605808f2221c95c6eb9208db9b948c3d22 /selinux/cpboot-daemon.te | |
| parent | c44906d64a221421c303e36e1571f373984ef53a (diff) | |
| download | device_samsung_n7100-0bf7364ac512f26be0373bf8810bd5c2cdc5c99d.zip device_samsung_n7100-0bf7364ac512f26be0373bf8810bd5c2cdc5c99d.tar.gz device_samsung_n7100-0bf7364ac512f26be0373bf8810bd5c2cdc5c99d.tar.bz2 | |
n7100: Bring in Selinux for M
* commits picked up from the i9300 device repo and made a few changes for n7100
credits to keepcalm444
Diffstat (limited to 'selinux/cpboot-daemon.te')
| -rw-r--r-- | selinux/cpboot-daemon.te | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/selinux/cpboot-daemon.te b/selinux/cpboot-daemon.te new file mode 100644 index 0000000..9974ff2 --- /dev/null +++ b/selinux/cpboot-daemon.te @@ -0,0 +1,25 @@ +type cpboot-daemon, domain; + +permissive cpboot-daemon; + +allow cpboot-daemon cgroup:dir { create add_name }; +allow cpboot-daemon device:dir { write remove_name add_name }; +allow cpboot-daemon efs_block_device:blk_file { read open }; +allow cpboot-daemon efs_device_file:dir search; +allow cpboot-daemon efs_file:file { read write open }; +allow cpboot-daemon init:unix_stream_socket connectto; +allow cpboot-daemon log_device:chr_file { write open }; +allow cpboot-daemon log_device:dir search; +allow cpboot-daemon property_socket:sock_file write; +allow cpboot-daemon radio_device:chr_file { read write ioctl open }; +allow cpboot-daemon radio_prop:property_service set; +allow cpboot-daemon self:capability { setuid }; +allow cpboot-daemon sysfs_radio:file { read write open }; +allow cpboot-daemon usbfs:dir search; +allow cpboot-daemon self:capability dac_override; +allow cpboot-daemon cbd_device:chr_file create_file_perms; + +# FIX ME +# allow cpboot-daemon usbfs:filesystem mount; +# allow cpboot-daemon self:capability { mknod }; + |