diff options
| author | tilaksidduram <tilaksidduram@gmail.com> | 2015-12-21 21:36:04 +0530 |
|---|---|---|
| committer | tilaksidduram <tilaksidduram@gmail.com> | 2015-12-22 19:54:22 +0530 |
| commit | 0bf7364ac512f26be0373bf8810bd5c2cdc5c99d (patch) | |
| tree | 10bcaf605808f2221c95c6eb9208db9b948c3d22 /selinux/system_server.te | |
| parent | c44906d64a221421c303e36e1571f373984ef53a (diff) | |
| download | device_samsung_n7100-0bf7364ac512f26be0373bf8810bd5c2cdc5c99d.zip device_samsung_n7100-0bf7364ac512f26be0373bf8810bd5c2cdc5c99d.tar.gz device_samsung_n7100-0bf7364ac512f26be0373bf8810bd5c2cdc5c99d.tar.bz2 | |
n7100: Bring in Selinux for M
* commits picked up from the i9300 device repo and made a few changes for n7100
credits to keepcalm444
Diffstat (limited to 'selinux/system_server.te')
| -rw-r--r-- | selinux/system_server.te | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/selinux/system_server.te b/selinux/system_server.te new file mode 100644 index 0000000..31db12d --- /dev/null +++ b/selinux/system_server.te @@ -0,0 +1,33 @@ +allow system_server input_device:chr_file { read ioctl write open }; +allow system_server sensors_device:chr_file { read open }; +allow system_server sensors_data_file:file r_file_perms; +allow system_server wpa_socket:unix_dgram_socket sendto; + +allow system_server sysfs:file { read open write }; +allow system_server self:capability { sys_module }; + +allow system_server efs_file:dir search; +allow system_server efs_file:file read; +allow system_server efs_device_file:dir search; +allow system_server uhid_device:chr_file { read ioctl write open }; +allow system_server storage_stub_file:dir getattr; + + +# for sensors +allow system_server system_file:file execmod; + +# /efs/wifi/.mac.info +allow system_server wifi_data_file:file { read open }; + +allow system_server gpsd:binder transfer; +type_transition system_server system_data_file:fifo_file gps_data_file ".gps.interface.pipe.to_jni"; + +# Access .gps.interface.pipe.to_gpsd. +allow system_server gps_data_file:dir rw_dir_perms; +allow system_server gps_data_file:fifo_file { setattr rw_file_perms create }; + +# Access /data/sensors/gps* socket +allow system_server gps_data_file:sock_file create_file_perms; +allow system_server gps_data_file:dir rw_dir_perms; +allow system_server gps_data_file:file rw_file_perms; + |