diff --git a/sepolicy/ssr_detector.te b/sepolicy/ssr_detector.te index b586b9d1..01e976db 100644 --- a/sepolicy/ssr_detector.te +++ b/sepolicy/ssr_detector.te @@ -1,16 +1,17 @@ # SSRestartDetector app type ssr_detector_app, domain; -userdebug_or_eng(` - app_domain(ssr_detector_app) +app_domain(ssr_detector_app) +userdebug_or_eng(` allow ssr_detector_app ramdump_vendor_data_file:dir r_dir_perms; allow ssr_detector_app ramdump_vendor_data_file:file r_file_perms; get_prop(ssr_detector_app, ssr_prop) - - allow ssr_detector_app { app_api_service }:service_manager find; - - # Read and write /data/data subdirectory. - allow ssr_detector_app system_app_data_file:dir create_dir_perms; - allow ssr_detector_app system_app_data_file:{ file lnk_file } create_file_perms; ') + allow ssr_detector_app app_api_service:service_manager find; + +# ssr_detector app's data type is system_app_data_file. +allow ssr_detector_app system_app_data_file:dir create_dir_perms; +allow ssr_detector_app system_app_data_file:{ file lnk_file } create_file_perms; + +r_dir_file(ssr_detector_app, sysfs_msm_subsys)