diff --git a/non_plat/vendor_init.te b/non_plat/vendor_init.te index 226b53d..c5f8e32 100644 --- a/non_plat/vendor_init.te +++ b/non_plat/vendor_init.te @@ -8,7 +8,7 @@ allow vendor_init mtk_md_version_prop:property_service set; allow vendor_init mtk_volte_prop:property_service set; allow vendor_init usp_prop:property_service set; allow vendor_init vendor_radio_prop:property_service set; - +allow vendor_init wmt_prop:property_service set; allow vendor_init proc:file write; allow vendor_init proc_bootprof:file write; @@ -16,7 +16,7 @@ allow vendor_init rootfs:dir { write add_name setattr }; allow vendor_init self:capability sys_module; allow vendor_init tmpfs:dir { write create add_name }; - +allow vendor_init unlabeled:dir { relabelfrom getattr setattr search }; allow vendor_init vendor_file:system module_load; allow vendor_init kmsg_device:chr_file unlink; diff --git a/non_plat/zygote.te b/non_plat/zygote.te index 416727b..68e8971 100644 --- a/non_plat/zygote.te +++ b/non_plat/zygote.te @@ -10,3 +10,6 @@ allow zygote proc_ged:file {open read write ioctl getattr}; # Purpose: Allow to access gpu for memtrack functions allow zygote gpu_device:dir search; allow zygote gpu_device:chr_file { open read write ioctl getattr}; + +allow zygote proc_bootprof:file rw_file_perms; +allow zygote proc_uptime:file rw_file_perms;