diff --git a/BoardConfig.mk b/BoardConfig.mk index ada2b95..e349c0b 100644 --- a/BoardConfig.mk +++ b/BoardConfig.mk @@ -26,5 +26,8 @@ TARGET_LD_SHIM_LIBS += \ # Properties TARGET_SYSTEM_PROP += device/samsung/mondrianlte/system.prop +# SELinux +BOARD_VENDOR_SEPOLICY_DIRS += device/samsung/mondrianlte/sepolicy/vendor + # inherit from the proprietary version include vendor/samsung/mondrianlte/BoardConfigVendor.mk diff --git a/sepolicy/vendor/netmgrd.te b/sepolicy/vendor/netmgrd.te new file mode 100644 index 0000000..03fcde3 --- /dev/null +++ b/sepolicy/vendor/netmgrd.te @@ -0,0 +1,2 @@ +get_prop(netmgrd, radio_prop) +get_prop(netmgrd, default_prop) diff --git a/sepolicy/vendor/rild.te b/sepolicy/vendor/rild.te new file mode 100644 index 0000000..6000d88 --- /dev/null +++ b/sepolicy/vendor/rild.te @@ -0,0 +1,17 @@ +set_prop(rild, net_radio_prop) +set_prop(rild, radio_prop) +set_prop(rild, system_prop) +get_prop(rild, default_prop) +get_prop(rild, vendor_rild_libpath_prop) + +allow rild alarm_device:chr_file rw_file_perms; + +allow rild radio_data_file:dir rw_dir_perms; +allow rild radio_data_file:file create_file_perms; +allow rild radio_data_file:lnk_file read; + +allow rild proc_net:file w_file_perms; +allow rild proc_qtaguid_stat:file r_file_perms; +allow rild sysfs_sec_key:file rw_file_perms; +allow rild radio_core_data_file:file { create_file_perms open rw_file_perms getattr ioctl lock unlink }; +allow rild radio_core_data_file:dir { search open remove_name add_name rw_dir_perms };