diff --git a/sepolicy/vendor/adsprpcd.te b/sepolicy/vendor/adsprpcd.te index 58fe3e7..5227744 100644 --- a/sepolicy/vendor/adsprpcd.te +++ b/sepolicy/vendor/adsprpcd.te @@ -1 +1,2 @@ +r_dir_file(vendor_adsprpcd, public_adsprpcd_file) r_dir_file(vendor_adsprpcd, vendor_sysfs_graphics) diff --git a/sepolicy/vendor/cdsprpcd.te b/sepolicy/vendor/cdsprpcd.te new file mode 100644 index 0000000..cead8a9 --- /dev/null +++ b/sepolicy/vendor/cdsprpcd.te @@ -0,0 +1 @@ +r_dir_file(vendor_cdsprpcd, public_adsprpcd_file) diff --git a/sepolicy/vendor/file.te b/sepolicy/vendor/file.te index ef6eeef..1ad9a84 100644 --- a/sepolicy/vendor/file.te +++ b/sepolicy/vendor/file.te @@ -6,6 +6,7 @@ type persist_subsys_file, vendor_persist_type, file_type; # Camera type vendor_camera_persist_file, vendor_persist_type, file_type; +type public_adsprpcd_file, file_type; # Fingerprint type fingerprint_data_file, data_file_type, core_data_file_type, file_type; diff --git a/sepolicy/vendor/hal_health_default.te b/sepolicy/vendor/hal_health_default.te index f881022..2148b11 100644 --- a/sepolicy/vendor/hal_health_default.te +++ b/sepolicy/vendor/hal_health_default.te @@ -1,3 +1,5 @@ allow hal_health_default sysfs_wakeup:dir r_dir_perms; allow hal_health_default sysfs_wakeup:file r_file_perms; allow hal_health_default sysfs:file { getattr open read }; + +r_dir_file(hal_health_default, vendor_sysfs_battery_supply) diff --git a/sepolicy/vendor/hal_neuralnetworks_default.te b/sepolicy/vendor/hal_neuralnetworks_default.te index 2e81a1c..8d83ac6 100644 --- a/sepolicy/vendor/hal_neuralnetworks_default.te +++ b/sepolicy/vendor/hal_neuralnetworks_default.te @@ -1 +1,3 @@ get_prop(vendor_hal_neuralnetworks_default, vendor_adsprpc_prop) + +r_dir_file(vendor_hal_neuralnetworks_default, public_adsprpcd_file) diff --git a/sepolicy/vendor/init.te b/sepolicy/vendor/init.te index 33eca8b..dbd9c20 100644 --- a/sepolicy/vendor/init.te +++ b/sepolicy/vendor/init.te @@ -1,3 +1,4 @@ +allow init adsprpcd_file:file mounton; allow init vendor_sysfs_graphics:file mounton; # Allow init to set read_ahead_kb and discard_max_bytes on /data partition diff --git a/sepolicy/vendor/vppservice.te b/sepolicy/vendor/vppservice.te new file mode 100644 index 0000000..e9e1809 --- /dev/null +++ b/sepolicy/vendor/vppservice.te @@ -0,0 +1 @@ +r_dir_file(vendor_vppservice, public_adsprpcd_file) diff --git a/sepolicy/vendor/wcnss_service.te b/sepolicy/vendor/wcnss_service.te index 7f5315a..ee30572 100644 --- a/sepolicy/vendor/wcnss_service.te +++ b/sepolicy/vendor/wcnss_service.te @@ -5,3 +5,6 @@ allow vendor_wcnss_service vendor_data_file:file create_file_perms; allow vendor_wcnss_service vendor_wifi_vendor_wpa_socket:dir create_dir_perms; allow vendor_wcnss_service vendor_wifi_vendor_wpa_socket:sock_file create_file_perms; allow vendor_wcnss_service property_socket:sock_file write; + +r_dir_file(vendor_wcnss_service, mnt_vendor_file) +allow vendor_wcnss_service mnt_vendor_file:file create_file_perms;