sepolicy: Add rules for xcap
Change-Id: I19c1f971b08e8d08f9c44d33b8036a267eee1e99
This commit is contained in:
parent
22b3052286
commit
8c706294c1
@ -686,6 +686,8 @@
|
|||||||
/(vendor|system/vendor)/bin/fpsgo u:object_r:fpsgo_native_exec:s0
|
/(vendor|system/vendor)/bin/fpsgo u:object_r:fpsgo_native_exec:s0
|
||||||
/(vendor|system/vendor)/bin/xgff_test u:object_r:xgff_test_native_exec:s0
|
/(vendor|system/vendor)/bin/xgff_test u:object_r:xgff_test_native_exec:s0
|
||||||
|
|
||||||
|
/(vendor|system/vendor)/bin/xcap u:object_r:xcap_exec:s0
|
||||||
|
|
||||||
/(vendor|system/vendor)/bin/biosensord_nvram u:object_r:biosensord_nvram_exec:s0
|
/(vendor|system/vendor)/bin/biosensord_nvram u:object_r:biosensord_nvram_exec:s0
|
||||||
/(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.[0-9]-service-mediatek u:object_r:mtk_hal_bluetooth_exec:s0
|
/(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.[0-9]-service-mediatek u:object_r:mtk_hal_bluetooth_exec:s0
|
||||||
/(vendor|system/vendor)/bin/hw/android\.hardware\.gnss@2\.1-service-mediatek u:object_r:mtk_hal_gnss_exec:s0
|
/(vendor|system/vendor)/bin/hw/android\.hardware\.gnss@2\.1-service-mediatek u:object_r:mtk_hal_gnss_exec:s0
|
||||||
|
7
basic/non_plat/xcap.te
Normal file
7
basic/non_plat/xcap.te
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
type xcap, domain;
|
||||||
|
type xcap_exec, exec_type, file_type, vendor_file_type;
|
||||||
|
|
||||||
|
init_daemon_domain(xcap)
|
||||||
|
|
||||||
|
allow xcap ccci_device:chr_file rw_file_perms;
|
||||||
|
allow xcap self:capability sys_admin;
|
Loading…
x
Reference in New Issue
Block a user