diff options
| author | fire855 <thefire855@gmail.com> | 2017-08-03 22:18:35 +0200 |
|---|---|---|
| committer | Mister Oyster <oysterized@gmail.com> | 2017-08-21 14:59:07 +0200 |
| commit | 8caa4fa4f0642ae0d6be888c229cb618f29cf156 (patch) | |
| tree | 4844ed1526a1e59d3fbec40b1ff130916c518bf7 | |
| parent | 8fb5e246975c4dd846335108f67bcc25ff3ad116 (diff) | |
sepolicy: fix camera denials
| -rw-r--r-- | sepolicy/cameraserver.te | 2 | ||||
| -rw-r--r-- | sepolicy/file.te | 1 | ||||
| -rw-r--r-- | sepolicy/file_contexts | 3 |
3 files changed, 5 insertions, 1 deletions
diff --git a/sepolicy/cameraserver.te b/sepolicy/cameraserver.te index 1075e49..1499b49 100644 --- a/sepolicy/cameraserver.te +++ b/sepolicy/cameraserver.te @@ -16,6 +16,8 @@ allow cameraserver devmap_device:chr_file { ioctl r_file_perms }; allow cameraserver sysfs_devinfo:file rw_file_perms; allow cameraserver sysfs_membw:file rw_file_perms; allow cameraserver proc_meminfo:file { open read getattr }; +allow cameraserver sysfs_boot_mode:file r_file_perms; +allow cameraserver sysfs_ddr_type:file r_file_perms; # PQ allow cameraserver pq_service:service_manager find; diff --git a/sepolicy/file.te b/sepolicy/file.te index ee8b41e..d32baf2 100644 --- a/sepolicy/file.te +++ b/sepolicy/file.te @@ -15,6 +15,7 @@ type sysfs_ccci, fs_type, sysfs_type; type sysfs_devinfo, fs_type, sysfs_type; type sysfs_membw, fs_type, sysfs_type; type sysfs_bootmode, fs_type, sysfs_type; +type sysfs_ddr_type, fs_type, sysfs_type; type msensord_daemon_sysfs, fs_type, sysfs_type; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index abd9f4e..384685a 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -110,6 +110,8 @@ /sys/kernel/ccci(/.*)? u:object_r:sysfs_ccci:s0 /sys/bus/platform/drivers/dev_info/dev_info u:object_r:sysfs_devinfo:s0 /sys/bus/platform/drivers/mem_bw_ctrl/concurrency_scenario u:object_r:sysfs_membw:s0 +/sys/bus/platform/drivers/ddr_type/ddr_type u:object_r:sysfs_ddr_type:s0 +/sys/devices/virtual/BOOT/BOOT/boot/boot_mode u:object_r:sysfs_boot_mode:s0 /sys/devices/platform/mtk_disp_mgr.0/rgb u:object_r:livedisplay_sysfs:s0 /sys/bus/platform/drivers/msensor/daemon u:object_r:msensord_daemon_sysfs:s0 /sys/bus/platform/drivers/gyroscope/gyro_orientation u:object_r:gyro_orientation_sysfs:s0 @@ -120,7 +122,6 @@ /sys/devices/.*/queue/scheduler u:object_r:perf_control_sysfs:s0 /sys/devices/platform/mx-gs/gesture_control u:object_r:smartwake_sysfs:s0 /sys/class/meizu/ps/ps_calibration u:object_r:meizu_ps_calibration_trigger:s0 -/sys/class/BOOT/BOOT/boot(/.*)? u:object_r:sysfs_bootmode:s0 # Config/Runtime files /data/agps_supl(/.*)? u:object_r:agpsd_data_file:s0 |