diff options
| -rw-r--r-- | selinux/debuggerd.te | 2 | ||||
| -rw-r--r-- | selinux/init.te | 1 | ||||
| -rw-r--r-- | selinux/mediaserver.te | 1 |
3 files changed, 4 insertions, 0 deletions
diff --git a/selinux/debuggerd.te b/selinux/debuggerd.te new file mode 100644 index 0000000..9e574e7 --- /dev/null +++ b/selinux/debuggerd.te @@ -0,0 +1,2 @@ +allow debuggerd gpu_device:chr_file { read getattr open }; +allow debuggerd video_device:chr_file open; diff --git a/selinux/init.te b/selinux/init.te index f4b18d5..1545be3 100644 --- a/selinux/init.te +++ b/selinux/init.te @@ -7,3 +7,4 @@ allow init radio_device:lnk_file setattr; allow init tmpfs:lnk_file create; allow init sysfs_bluetooth_writable:lnk_file { read getattr }; allow init sysfs_bluetooth_writable:file getattr; +allow init socket_device:sock_file setattr; diff --git a/selinux/mediaserver.te b/selinux/mediaserver.te index 5f41f1a..a621e62 100644 --- a/selinux/mediaserver.te +++ b/selinux/mediaserver.te @@ -7,3 +7,4 @@ allow mediaserver socket_device:dir { add_name write }; allow mediaserver socket_device:sock_file { setattr write create }; allow mediaserver qmuxd:unix_stream_socket connectto; allow mediaserver mnt_user_file:lnk_file read; +allow mediaserver sysfs_wake_lock:file { read write open }; |