diff options
author | Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de> | 2016-02-16 18:36:09 +0100 |
---|---|---|
committer | Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de> | 2016-02-16 18:36:31 +0100 |
commit | 8f0313215eb8643c71a692cc2318a1440d1ab0a9 (patch) | |
tree | 1fb1b67118879fcb6a9689a0b8cbde7d68f44f80 /selinux/cpboot-daemon.te | |
parent | b58a574578f1f5a268d498638352a0680d459024 (diff) | |
download | device_samsung_i9300-8f0313215eb8643c71a692cc2318a1440d1ab0a9.zip device_samsung_i9300-8f0313215eb8643c71a692cc2318a1440d1ab0a9.tar.gz device_samsung_i9300-8f0313215eb8643c71a692cc2318a1440d1ab0a9.tar.bz2 |
selinux: allow rild access to sysfs_radio and let system_server open the wifi firmware
This makes RIL and wifi work with SELinux in enforcing mode
also remove rules for the proprietary cbd
Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
Diffstat (limited to 'selinux/cpboot-daemon.te')
-rw-r--r-- | selinux/cpboot-daemon.te | 25 |
1 files changed, 0 insertions, 25 deletions
diff --git a/selinux/cpboot-daemon.te b/selinux/cpboot-daemon.te deleted file mode 100644 index 9974ff2..0000000 --- a/selinux/cpboot-daemon.te +++ /dev/null @@ -1,25 +0,0 @@ -type cpboot-daemon, domain; - -permissive cpboot-daemon; - -allow cpboot-daemon cgroup:dir { create add_name }; -allow cpboot-daemon device:dir { write remove_name add_name }; -allow cpboot-daemon efs_block_device:blk_file { read open }; -allow cpboot-daemon efs_device_file:dir search; -allow cpboot-daemon efs_file:file { read write open }; -allow cpboot-daemon init:unix_stream_socket connectto; -allow cpboot-daemon log_device:chr_file { write open }; -allow cpboot-daemon log_device:dir search; -allow cpboot-daemon property_socket:sock_file write; -allow cpboot-daemon radio_device:chr_file { read write ioctl open }; -allow cpboot-daemon radio_prop:property_service set; -allow cpboot-daemon self:capability { setuid }; -allow cpboot-daemon sysfs_radio:file { read write open }; -allow cpboot-daemon usbfs:dir search; -allow cpboot-daemon self:capability dac_override; -allow cpboot-daemon cbd_device:chr_file create_file_perms; - -# FIX ME -# allow cpboot-daemon usbfs:filesystem mount; -# allow cpboot-daemon self:capability { mknod }; - |