diff options
author | RGIB <gibellini.roberto@gmail.com> | 2016-11-27 23:45:35 +0100 |
---|---|---|
committer | RGIB <gibellini.roberto@gmail.com> | 2016-11-27 23:45:35 +0100 |
commit | 1e3c6c4a20cde875b23c69afd4025c492511e822 (patch) | |
tree | 1d356fd78e138ac33c1d1dc99a890594ca0a440c /selinux/qcks.te | |
parent | bae7ee3f1d348c29f8eb604ce774d22757460927 (diff) | |
download | device_samsung_i9305-1e3c6c4a20cde875b23c69afd4025c492511e822.zip device_samsung_i9305-1e3c6c4a20cde875b23c69afd4025c492511e822.tar.gz device_samsung_i9305-1e3c6c4a20cde875b23c69afd4025c492511e822.tar.bz2 |
i9305 : update selinux policies for MM
Change-Id: Ia96cb118083b20e87b94412ab5072be34cd6e806
Diffstat (limited to 'selinux/qcks.te')
-rw-r--r-- | selinux/qcks.te | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/selinux/qcks.te b/selinux/qcks.te new file mode 100644 index 0000000..cb72379 --- /dev/null +++ b/selinux/qcks.te @@ -0,0 +1,23 @@ +type qcks, domain; +type qcks_exec, exec_type, file_type; + +init_daemon_domain(qcks) +domain_trans(init, rootfs, qcks) + +allow qcks efsks_exec:file { read getattr open execute execute_no_trans }; +allow qcks ks_exec:file { read getattr open execute execute_no_trans }; +allow qcks mmc_block_device:blk_file getattr; +allow qcks radio_device:chr_file { read getattr open ioctl }; +allow qcks self:capability setuid; +allow qcks serial_device:chr_file { read write getattr open ioctl }; +allow qcks shell_exec:file execute_no_trans; +allow qcks vfat:file { read getattr open }; +allow qcks mmc_block_device:blk_file { read open }; +allow qcks radio_data_file:dir search; +allow qcks radio_data_file:file { read write getattr open }; +allow qcks radio_data_file:file setattr; +allow qcks mmc_block_device:blk_file write; +allow qcks vfat:dir search; +allow qcks shell_exec:file { read execute open }; +allow qcks radio_device:dir search; +allow qcks unlabeled:dir search; |