summaryrefslogtreecommitdiffstats
path: root/selinux/cpboot-daemon.te
diff options
context:
space:
mode:
authorWolfgang Wiedmeyer <wolfgit@wiedmeyer.de>2017-02-22 13:39:29 +0100
committerWolfgang Wiedmeyer <wolfgit@wiedmeyer.de>2017-02-22 13:39:29 +0100
commitede22880e73d84d70b1cb55ea8b24201472c0cb3 (patch)
tree8c4c7822e5c37babf9703253f7034710b99debe9 /selinux/cpboot-daemon.te
parent365abd1dd8167e22c51ef59f759e67e8a582bbb2 (diff)
downloaddevice_samsung_n7100-ede22880e73d84d70b1cb55ea8b24201472c0cb3.zip
device_samsung_n7100-ede22880e73d84d70b1cb55ea8b24201472c0cb3.tar.gz
device_samsung_n7100-ede22880e73d84d70b1cb55ea8b24201472c0cb3.tar.bz2
selinux: fix rild and wifi and remove cbd rules
Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
Diffstat (limited to 'selinux/cpboot-daemon.te')
-rw-r--r--selinux/cpboot-daemon.te25
1 files changed, 0 insertions, 25 deletions
diff --git a/selinux/cpboot-daemon.te b/selinux/cpboot-daemon.te
deleted file mode 100644
index 9974ff2..0000000
--- a/selinux/cpboot-daemon.te
+++ /dev/null
@@ -1,25 +0,0 @@
-type cpboot-daemon, domain;
-
-permissive cpboot-daemon;
-
-allow cpboot-daemon cgroup:dir { create add_name };
-allow cpboot-daemon device:dir { write remove_name add_name };
-allow cpboot-daemon efs_block_device:blk_file { read open };
-allow cpboot-daemon efs_device_file:dir search;
-allow cpboot-daemon efs_file:file { read write open };
-allow cpboot-daemon init:unix_stream_socket connectto;
-allow cpboot-daemon log_device:chr_file { write open };
-allow cpboot-daemon log_device:dir search;
-allow cpboot-daemon property_socket:sock_file write;
-allow cpboot-daemon radio_device:chr_file { read write ioctl open };
-allow cpboot-daemon radio_prop:property_service set;
-allow cpboot-daemon self:capability { setuid };
-allow cpboot-daemon sysfs_radio:file { read write open };
-allow cpboot-daemon usbfs:dir search;
-allow cpboot-daemon self:capability dac_override;
-allow cpboot-daemon cbd_device:chr_file create_file_perms;
-
-# FIX ME
-# allow cpboot-daemon usbfs:filesystem mount;
-# allow cpboot-daemon self:capability { mknod };
-