lineage/android_device_samsung_msm8974-common
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

msm8974-common: sepolicy: Resolve last_kmsg denials

Browse Source 
Change-Id: Ib6a00d0c14eb03f1e16b24471736a0b84371152c
This commit is contained in:
Arne Coucheron 2020-12-15 00:53:55 +01:00 committed by Kevin F. Haggerty
parent ec4379ecd8
commit 07931872be
No known key found for this signature in database
GPG Key ID: 6D95512933112729
4 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
sepolicy/common/file.te
View File

@ -1,6 +1,7 @@
type alarm_device, dev_type, mlstrustedobject; type alarm_device, dev_type, mlstrustedobject;
type proc_bt_sleep, fs_type, proc_type; type proc_bt_sleep, fs_type, proc_type;
type proc_last_kmsg, fs_type, proc_type;
type sysfs_camera, fs_type, sysfs_type; type sysfs_camera, fs_type, sysfs_type;
type sysfs_hal_pwr, fs_type, sysfs_type; type sysfs_hal_pwr, fs_type, sysfs_type;

1
sepolicy/common/genfs_contexts
View File

@ -1 +1,2 @@
genfscon proc /bluetooth/sleep u:object_r:proc_bt_sleep:s0 genfscon proc /bluetooth/sleep u:object_r:proc_bt_sleep:s0
genfscon proc /last_kmsg u:object_r:proc_last_kmsg:s0

1
sepolicy/common/init.te
View File

@ -1 +1,2 @@
allow init efs_file:dir mounton; allow init efs_file:dir mounton;
allow init proc_last_kmsg:file { r_file_perms setattr };

2
sepolicy/common/system_server.te
View File

@ -8,5 +8,7 @@ allow system_server {
qti_debugfs qti_debugfs
}:file r_file_perms; }:file r_file_perms;
allow system_server proc_last_kmsg:file r_file_perms;
get_prop(system_server, userspace_reboot_config_prop); get_prop(system_server, userspace_reboot_config_prop);
get_prop(system_server, userspace_reboot_exported_prop); get_prop(system_server, userspace_reboot_exported_prop);