aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorArne Coucheron <arco68@gmail.com>2016-06-07 06:54:43 +0200
committerArne Coucheron <arco68@gmail.com>2016-06-07 06:54:43 +0200
commit905a645785c554712f7ed9758a7cd5506334deb6 (patch)
tree999c15bf7d3c35400881f1d47ae42852131f2aa7
parentd05a2b4930660ea3dc8d9bfc8e86203d67bdf1a9 (diff)
sepolicy: Resolve denials for KeyDisabler
Change-Id: I1982a3979ebb58ab03fbe684bbd098d743607f8e
-rw-r--r--sepolicy/device/file.te1
-rw-r--r--sepolicy/device/file_contexts3
-rw-r--r--sepolicy/device/system_app.te1
-rw-r--r--sepolicy/device/system_server.te1
-rw-r--r--sepolicy/device/ueventd.te1
5 files changed, 6 insertions, 1 deletions
diff --git a/sepolicy/device/file.te b/sepolicy/device/file.te
index c201d98..63f8a09 100644
--- a/sepolicy/device/file.te
+++ b/sepolicy/device/file.te
@@ -1,3 +1,4 @@
type sysfs_bln, fs_type, sysfs_type;
+type sysfs_keypad, fs_type, sysfs_type;
type wifi_efs_file, file_type;
type geomagneticd_data_file, file_type, data_file_type;
diff --git a/sepolicy/device/file_contexts b/sepolicy/device/file_contexts
index e01aa96..f135538 100644
--- a/sepolicy/device/file_contexts
+++ b/sepolicy/device/file_contexts
@@ -32,4 +32,5 @@
/system/bin/insthk u:object_r:insthk_exec:s0
/system/bin/geomagneticd u:object_r:geomagneticd_exec:s0
-/sys/devices/virtual/misc/backlightnotification(/.*)? -- u:object_r:sysfs_bln:s0
+/sys/devices/virtual/misc/backlightnotification(/.*)? u:object_r:sysfs_bln:s0
+/sys/devices/virtual/sec/sec_touchkey/touchkey_enable u:object_r:sysfs_keypad:s0
diff --git a/sepolicy/device/system_app.te b/sepolicy/device/system_app.te
index 63012be..49003e6 100644
--- a/sepolicy/device/system_app.te
+++ b/sepolicy/device/system_app.te
@@ -2,3 +2,4 @@ allow system_app shell_data_file:dir search;
allow system_app sysfs_bln:dir search;
allow system_app sysfs_bln:file rw_file_perms;
allow system_app sysfs_bln:lnk_file read;
+allow system_app sysfs_keypad:file rw_file_perms;
diff --git a/sepolicy/device/system_server.te b/sepolicy/device/system_server.te
index ed896b2..ad10379 100644
--- a/sepolicy/device/system_server.te
+++ b/sepolicy/device/system_server.te
@@ -8,3 +8,4 @@ allow system_server recovery_cache_file:file { relabelfrom create_file_perms };
allow system_server persist_file:dir { getattr read write };
allow system_server time_daemon:unix_stream_socket connectto;
allow system_server system_file:file execmod;
+allow system_server sysfs_keypad:file rw_file_perms;
diff --git a/sepolicy/device/ueventd.te b/sepolicy/device/ueventd.te
index 503cbeb..811acf1 100644
--- a/sepolicy/device/ueventd.te
+++ b/sepolicy/device/ueventd.te
@@ -1 +1,2 @@
allow ueventd sysfs_bln:file rw_file_perms;
+allow ueventd sysfs_keypad:file getattr;