aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorOrdenKrieger <OrdenKriegerEDR@googlemail.com>2021-10-14 13:31:09 +0200
committerAlessandro Astone <ales.astone@gmail.com>2021-10-15 15:54:33 +0200
commitcf622da8888828fa5858dc7038e137c27331103e (patch)
tree092774ab7330813daaecb31c2b7aac87390a362c
parent0977c2255db4a6f23d365e3fa0b0cc574f39f23f (diff)
sm8250-common: sepolicy: Fix some character device file denials
Change-Id: I36fa98e4d3a7456e8671cf9e7b2194b8c566fe14
-rw-r--r--sepolicy/vendor/file_contexts2
-rw-r--r--sepolicy/vendor/hal_camera_default.te2
-rw-r--r--sepolicy/vendor/hal_sensors_default.te1
3 files changed, 5 insertions, 0 deletions
diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts
index 24f1d49..bfd1a71 100644
--- a/sepolicy/vendor/file_contexts
+++ b/sepolicy/vendor/file_contexts
@@ -8,6 +8,8 @@
# Devices
/dev/goodix_fp u:object_r:fingerprintd_device:s0
+/dev/lsensor u:object_r:sensors_device:s0
+/dev/psensor u:object_r:sensors_device:s0
# Files in rootfs
/ADF(/.*)? u:object_r:demoapp_file:s0
diff --git a/sepolicy/vendor/hal_camera_default.te b/sepolicy/vendor/hal_camera_default.te
index 2846a43..168a8f0 100644
--- a/sepolicy/vendor/hal_camera_default.te
+++ b/sepolicy/vendor/hal_camera_default.te
@@ -4,4 +4,6 @@ binder_call(hal_camera_default, system_server)
allow hal_camera_default mnt_vendor_file:file { read getattr open };
allow hal_camera_default mnt_vendor_file:dir { search };
+allow hal_camera_default vendor_xdsp_device:chr_file r_file_perms;
+
set_prop(hal_camera_default, vendor_camera_prop)
diff --git a/sepolicy/vendor/hal_sensors_default.te b/sepolicy/vendor/hal_sensors_default.te
new file mode 100644
index 0000000..dce2bd4
--- /dev/null
+++ b/sepolicy/vendor/hal_sensors_default.te
@@ -0,0 +1 @@
+allow hal_sensors_default sensors_device:chr_file r_file_perms;