mirror of
https://github.com/Evolution-X-Devices/device_google_wahoo
synced 2026-02-01 07:50:47 +00:00
vendor_init permissions for unencrypted_data_file are now global
So they can be removed from this device specific policy.
Bug: 77850279
Test: walleye + more restrictions continues to have FBE work
Change-Id: Ib77abd81ae886b40f5a078c379d352a53d865e31
(cherry picked from commit 659079a862)
This commit is contained in:
5
sepolicy/vendor/vendor_init.te
vendored
5
sepolicy/vendor/vendor_init.te
vendored
@@ -7,14 +7,9 @@ allow vendor_init {
|
||||
ramoops_data_file
|
||||
system_data_file
|
||||
tombstone_data_file
|
||||
unencrypted_data_file
|
||||
wifi_data_file
|
||||
}:dir { create search getattr open read setattr ioctl write add_name remove_name rmdir relabelfrom };
|
||||
|
||||
allow vendor_init {
|
||||
unencrypted_data_file
|
||||
}:file { create getattr open read write setattr relabelfrom unlink };
|
||||
|
||||
allow vendor_init debugfs_clk:file w_file_perms;
|
||||
allow vendor_init proc_uid_cpupower:file write;
|
||||
dontaudit vendor_init kernel:system module_request;
|
||||
|
||||
Reference in New Issue
Block a user