xavi
/
nougat_device_meizu_m2note
mirror of https://github.com/Moyster/nougat_device_meizu_m2note
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

sepolicy: denials while reading videos in app

This commit is contained in:
Mister Oyster 2017-09-30 14:20:15 +02:00
parent fa8c5e0761
commit 6b1255a702
7 changed files with 24 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sepolicy/bootanim.te Normal file
View File

@ -0,0 +1,2 @@
# dev_info
allow bootanim sysfs_devinfo:file r_file_perms;

4
sepolicy/mediacodec.te
View File

@ -16,6 +16,10 @@ allow mediacodec proc_meminfo:file { getattr open read };
allow mediacodec property_socket:sock_file write;
allow mediacodec init:unix_stream_socket connectto;
# omx
allow mediacodec sysfs_ddr_type:file r_file_perms;
allow mediacodec sysfs_membw:file { open rw_file_perms };
# M4U
allow mediacodec M4U_device_device:chr_file rw_file_perms;

4
sepolicy/platform_app.te
View File

@ -1,6 +1,8 @@
# Guiext
allow platform_app guiext-server_service:service_manager find;
# PQ
allow platform_app pq_service:service_manager find;
# dev_info
allow platform_app sysfs_devinfo:file r_file_perms;

3
sepolicy/priv_app.te
View File

@ -3,3 +3,6 @@ allow priv_app guiext-server_service:service_manager find;
# PQ
allow priv_app pq_service:service_manager find;
# dev_info
allow priv_app sysfs_devinfo:file r_file_perms;

6
sepolicy/surfaceflinger.te
View File

@ -1,10 +1,16 @@
# PQ
allow surfaceflinger pq_service:service_manager find;
# Gui-Ext
allow surfaceflinger guiext-server_service:service_manager { find add };
allow surfaceflinger debug_prop:property_service set;
# SMI
allow surfaceflinger mtk_smi_device:chr_file { read write open ioctl };
# boot_mode
allow surfaceflinger sysfs_boot_mode:file r_file_perms;
# dev_info
allow surfaceflinger sysfs_devinfo:file r_file_perms;

3
sepolicy/system_app.te
View File

@ -3,3 +3,6 @@ allow system_app perf_control_sysfs:file rw_file_perms;
allow system_app smartwake_sysfs:file rw_file_perms;
allow system_app em_svr:unix_stream_socket connectto;
# dev_info
allow system_app sysfs_devinfo:file r_file_perms;

3
sepolicy/system_server.te
View File

@ -25,3 +25,6 @@ allow system_server guiext-server_service:service_manager find;
# wlan0 hostap
allow system_server wifi_data_file:sock_file unlink;
# dev_info
allow system_server sysfs_devinfo:file r_file_perms;