universal7870: import Pie sepolicies

This commit is contained in:
Astrako 2020-01-28 00:06:11 +01:00 committed by Alejandro
parent 734b50ffaa
commit 221b221b8a
41 changed files with 583 additions and 0 deletions

14
sepolicy/mediaserver.te Normal file
View file

@ -0,0 +1,14 @@
# /efs
allow mediaserver efs_file:dir r_dir_perms;
# /efs/wv.keys
allow mediaserver efs_file:file r_file_perms;
# /dev/m2m1shot_jpeg
allow mediaserver camera_device:chr_file { read write open getattr ioctl };
# Snap permissions
allow mediaserver sensorservice_service:service_manager { find };
allow mediaserver system_server:unix_stream_socket { read write };
allow mediaserver ion_device:chr_file write;