Files
device_google_wahoo/sepolicy/vendor/system_server.te
Nolen Johnson 133d37f31f wahoo: sepolicy: vendor: Allow system_server to read sysfs_batteryinfo
* Wasn't seen on R, so lets allow it to maintain behavior.

Change-Id: I346a691115d3106d8e7202cb08cd48c6eb18b09d
2024-06-08 21:57:08 +08:00

29 lines
1.2 KiB
Plaintext

allow system_server self:socket ioctl;
allowxperm system_server self:socket ioctl msm_sock_ipc_ioctls;
binder_call(system_server, hal_camera_default)
allow system_server persist_file:dir search;
allow system_server persist_sensors_file:dir search;
allow system_server persist_sensors_file:file r_file_perms;
allow system_server sysfs_batteryinfo:dir r_dir_perms;
allow system_server wlan_device:chr_file rw_file_perms;
# TODO(b/73123675): BatterySaver needs access to cpufreq. Remove this access
# once cpufreq functionality is hidden behind a HAL.
allow system_server sysfs_devices_system_cpu:file w_file_perms;
# TODO(b/30675296): Remove following dontaudit's upon resolution of this bug
# The timerslack_ns denials spam the system really horribly
dontaudit system_server audioserver:file write;
dontaudit system_server untrusted_app:file write;
dontaudit system_server hal_audio_default:file write;
dontaudit system_server appdomain:file write;
typeattribute system_server system_writes_vendor_properties_violators;
set_prop(system_server, public_vendor_system_prop)
dontaudit system_server self:capability sys_module;
dontaudit system_server sysfs_msm_subsys:dir search;
dontaudit system_server sysfs_msm_subsys:file r_file_perms;