summaryrefslogtreecommitdiffstats
path: root/sepolicy/rild.te
diff options
context:
space:
mode:
authorLuden <luden@ghostmail.com>2016-03-17 20:19:12 +0000
committerZiyan <jaraidaniel@gmail.com>2016-04-03 15:49:30 +0200
commit3977f65b1374e3365f69695771afe886165564d6 (patch)
treea146b3b6135fc94fa2f4e62b54ed677f9bce4d6f /sepolicy/rild.te
parent3c60373689a44efea9a87b6cdac148530b02d775 (diff)
downloaddevice_samsung_tuna-3977f65b1374e3365f69695771afe886165564d6.zip
device_samsung_tuna-3977f65b1374e3365f69695771afe886165564d6.tar.gz
device_samsung_tuna-3977f65b1374e3365f69695771afe886165564d6.tar.bz2
Implemented SELinux rules for tuna.
Change-Id: I0c82e620532cf968341cc8c5d268aa0788ebb94f
Diffstat (limited to 'sepolicy/rild.te')
-rw-r--r--sepolicy/rild.te15
1 files changed, 13 insertions, 2 deletions
diff --git a/sepolicy/rild.te b/sepolicy/rild.te
index 67a21b6..b6013f0 100644
--- a/sepolicy/rild.te
+++ b/sepolicy/rild.te
@@ -1,4 +1,15 @@
# rild
-allow rild radio_data_file:dir { r_dir_perms setattr };
+
+# Needed for /data/radio/*, /data/misc/radio/* and /factory/*
+allow rild { radio_data_file radio_efs_file }:dir { rw_dir_perms setattr };
+allow rild { radio_data_file radio_efs_file }:file rw_file_perms;
+
allow rild self:process execmem;
-allow rild block_device:dir search;
+allow rild block_device:dir { search };
+
+# Needed for /system/vendor/lib/libsec-ril.so
+allow rild system_file:file { execute execmod };
+
+# Have no idea why rild needs access to logcat,
+# potentially to catch errors from some other components?
+allow rild logcat_exec:file { getattr read open execute execute_no_trans };