AetherDroid/android_device_samsung_universal7570-common
1
0
Fork 0
mirror of https://github.com/AetherDroid/android_device_samsung_universal7570-common.git synced 2025-09-05 07:57:46 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

universal7870: import Pie sepolicies

Browse source
This commit is contained in:
Astrako 2020-01-28 00:06:11 +01:00 • committed by Alejandro
parent 734b50ffaa
commit 221b221b8a
41 changed files with 583 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

60
sepolicy/rild.te Normal file
View file

@ -0,0 +1,60 @@
# Allow rild to change perms
allow rild self:capability { chown };
# Allow additiional efs access
allow rild bin_nv_data_efs_file:file create_file_perms;
allow rild imei_efs_file:dir r_dir_perms;
allow rild imei_efs_file:file r_file_perms;
allow rild app_efs_file:dir r_dir_perms;
allow rild app_efs_file:file r_file_perms;
# /dev
allow rild audioserver:dir r_dir_perms;
# /proc/<pid>/cmdline
allow rild audioserver:file r_file_perms;
# /dev/mbin0
allow rild block_device:dir r_dir_perms;
allow rild emmcblk_device:blk_file r_file_perms;
# /dev/umts*
allow rild mif_device:chr_file rw_file_perms;
# /proc/sys/net/ipv6/conf/*/accept_ra_defrtr
allow rild proc_net:file rw_file_perms;
allow rild gpsd:dir r_dir_perms;
allow rild gpsd:file r_file_perms;
# rild reads /proc/pid/cmdline of mediaserver
allow rild mediaserver:dir { open read search getattr };
allow rild mediaserver:file { open read getattr };
# /data/misc/radio/*
allow rild radio_data_file:dir rw_dir_perms;
allow rild radio_data_file:file create_file_perms;
# /data/data/com.android.providers.telephony/databases/telephony.db
allow rild radio_data_file:lnk_file r_file_perms;
# sdcard/SDET_PLMN/input/MNCMCC.txt
allow rild storage_file:dir { r_dir_perms };
allow rild storage_file:lnk_file { r_file_perms };
allow rild mnt_user_file:dir { r_dir_perms };
allow rild mnt_user_file:lnk_file { r_file_perms };
# Modem firmware download
allow rild radio_block_device:blk_file r_file_perms;
# persist.ril.modem.board
set_prop(modemloader, radio_prop)
allow rild sec_efs_file:file getattr;
allow rild sec_efs_file:dir search;
allow rild sysfs:dir r_dir_perms;
allow rild sysfs_sec:dir search;
allow rild sysfs_sec:lnk_file read;
# /dev/knox_kap
allow rild knox_device:chr_file r_file_perms;