sepolicy: cleanup

* logd rules ain't needed (lineage fixed system_core)
* add dir:read permissions on debugfs from system_server
* debuggered:self capa (else unwind crashes)
* fix cameraserver reading boot_mode
* mtk_agpsd search for media_rw_data_file
This commit is contained in:
Mister Oyster 2017-06-06 16:19:04 +02:00
parent a8e07433b1
commit 0c4238a2f7
5 changed files with 6 additions and 3 deletions

1
sepolicy/debuggerd.te Normal file
View File

@ -0,0 +1 @@
allow debuggerd self:capability { sys_resource };

View File

@ -117,7 +117,7 @@
/sys/devices/.*/queue/scheduler u:object_r:perf_control_sysfs:s0
/sys/devices/platform/mx-gs/gesture_control u:object_r:smartwake_sysfs:s0
/sys/class/meizu/ps/ps_calibration u:object_r:meizu_ps_calibration_trigger:s0
/sys/class/BOOT/BOOT/boot/boot_mode u:object_r:sysfs_bootmode:s0
/sys/class/BOOT/BOOT/boot(/.*)? u:object_r:sysfs_bootmode:s0
# Config/Runtime files
/data/agps_supl(/.*)? u:object_r:agpsd_data_file:s0

View File

@ -1 +0,0 @@
allow logd self:capability { dac_override dac_read_search };

View File

@ -19,5 +19,6 @@ allow mtk_agpsd fuse:dir create_dir_perms;
allow mtk_agpsd fuse:file create_file_perms;
allow mtk_agpsd sdcardfs:dir search;
allow mtk_agpsd media_rw_data_file:dir search;
unix_socket_send(mtk_agpsd, mnld, mnld);

View File

@ -16,5 +16,7 @@ allow system_server smartwake_sysfs:file rw_file_perms;
# Wifi
allow system_server wmtWifi_device:chr_file w_file_perms;
allow system_server sysfs_devinfo:file { open read };
# Debugfs
allow system_server debugfs:dir r_file_perms;