NekoSakura/Android_Device_Mediatek_Sepolicy_Vndr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sepolicy: basic: non_plat: Address nvram_daemon denials

Browse Source 
Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: I86df292fa27eb3756deaf537085607c20c7f6a99
This commit is contained in:
bengris32 2022-09-25 15:56:15 +01:00 committed by Matsvei Niaverau
parent f5923e2c19
commit 3afd698bbd
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
basic/non_plat/nvram_daemon.te
View File

@ -76,4 +76,12 @@ allow nvram_daemon sysfs_boot_mode:file r_file_perms;
read_fstab(nvram_daemon)
# Purpose: Wifi NVRAM ConnFem Kernel node access
allow nvram_daemon connfem_device:chr_file rw_file_perms;
allow nvram_daemon connfem_device:chr_file rw_file_perms;
# Purpose: Allow nvram_daemon to search /mnt/vendor/nvdata for fstab
allow nvram_daemon mnt_vendor_file:dir search;
allow nvram_daemon self:capability { fowner chown fsetid };
allow nvram_daemon sysfs_boot_mode:file r_file_perms;
allow nvram_daemon proc_cmdline:file r_file_perms;
allow nvram_daemon sysfs_dt_firmware_android:dir r_dir_perms;
allow nvram_daemon sysfs_dt_firmware_android:file r_file_perms;