diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index 108ec14..7dcc24f 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -3,6 +3,8 @@ /dev/kgsl-3d0 u:object_r:gpu_device:s0 /dev/rtc0 u:object_r:rtc_device:s0 /dev/smd.* u:object_r:smd_device:s0 +# TODO: does ttyMSM0 need to be more specific +/dev/ttyMSM0 u:object_r:tty_device:s0 /dev/ipa u:object_r:ipa_dev:s0 /dev/wwan_ioctl u:object_r:ipa_dev:s0 /dev/ipaNatTable u:object_r:ipa_dev:s0 diff --git a/sepolicy/init.te b/sepolicy/init.te index 5382906..7871abf 100644 --- a/sepolicy/init.te +++ b/sepolicy/init.te @@ -1,4 +1,7 @@ allow init self:capability sys_module; allow init system_file:system module_load; +allow init configfs:file w_file_perms; +allow init tty_device:chr_file rw_file_perms; + allow init persist_file:dir mounton;