summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSteve Kondik <steve@cyngn.com>2015-01-16 10:23:00 -0800
committerSteve Kondik <steve@cyngn.com>2015-01-16 10:23:00 -0800
commit5e7c74af596ecefad0017440152233566f5c32a8 (patch)
tree98f964cef6d471a758cabfabae6a4ad9f9895503
parent7f134914b0ce5117518b0b5be1dcfeda30fff479 (diff)
downloadandroid_device_qcom_sepolicy-5e7c74af596ecefad0017440152233566f5c32a8.tar.gz
android_device_qcom_sepolicy-5e7c74af596ecefad0017440152233566f5c32a8.tar.bz2
android_device_qcom_sepolicy-5e7c74af596ecefad0017440152233566f5c32a8.zip
selinux: Cleanup warnings
Change-Id: Ic70fe8cafcd837c5a52af69f46b565c5b58c0fa3
-rw-r--r--common/mediaserver.te6
-rw-r--r--common/wfd_app.te2
2 files changed, 1 insertions, 7 deletions
diff --git a/common/mediaserver.te b/common/mediaserver.te
index 3da8d8a5..7f7d9c97 100644
--- a/common/mediaserver.te
+++ b/common/mediaserver.te
@@ -16,6 +16,7 @@ allow mediaserver camera_data_file:sock_file write;
userdebug_or_eng(`
allow mediaserver camera_data_file:dir rw_dir_perms;
allow mediaserver camera_data_file:file create_file_perms;
+ allow mediaserver debugfs:file rw_file_perms;
')
allow mediaserver sysfs_esoc:dir r_dir_perms;
@@ -38,8 +39,3 @@ unix_socket_connect(mediaserver, thermal, thermal-engine)
# Allow mediaserver to search and get the widevine, playready firmwares
allow mediaserver firmware_file:dir search;
allow mediaserver firmware_file:file { read getattr open };
-
-#access to audio
-userdebug_or_eng('
-allow mediaserver debugfs:file rw_file_perms;
-')
diff --git a/common/wfd_app.te b/common/wfd_app.te
index e9d3dec8..b0371ee9 100644
--- a/common/wfd_app.te
+++ b/common/wfd_app.te
@@ -12,8 +12,6 @@ allow wfd_app video_device:dir r_dir_perms;
allow wfd_app video_device:chr_file rw_file_perms;
allow wfd_app audio_device:dir r_dir_perms;
allow wfd_app audio_device:chr_file rw_file_perms;
-allow wfd_app fwmarkd_socket:sock_file write;
-allow wfd_app mpctl_socket:dir r_dir_perms;
allow wfd_app netd:unix_stream_socket connectto;
allow wfd_app firmware_file:dir r_dir_perms;
allow wfd_app firmware_file:file r_file_perms;