From c3d43d2b47748f5e0278f01371398ed3e65ccdab Mon Sep 17 00:00:00 2001 From: rogersb11 Date: Thu, 12 Nov 2015 04:06:26 -0500 Subject: Revert "Remove device specific SEPolicy" Will follow with policy updates This reverts commit 8e368fa918f244e214ee8bd53ce332ce6ad74663. Change-Id: I58247300df68442709b44623e29b1bee0c6d5496 --- selinux/system.te | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100755 selinux/system.te (limited to 'selinux/system.te') diff --git a/selinux/system.te b/selinux/system.te new file mode 100755 index 0000000..1160fd7 --- /dev/null +++ b/selinux/system.te @@ -0,0 +1,11 @@ +# Talk to qmuxd +qmux_socket(system_server) + +allow system_server diagnostic_device:chr_file rw_file_perms; +allow system_server sensors_device:chr_file { read open }; +allow system_server sensors_data_file:file r_file_perms; +allow system_server wpa_socket:unix_dgram_socket sendto; +allow system_app volume_data_file:file { read write open getattr }; + +allow system_server sysfs:file { read open write }; +allow system_server self:capability { sys_module }; \ No newline at end of file -- cgit v1.2.3