aboutsummaryrefslogtreecommitdiffstats
path: root/rild.te
diff options
context:
space:
mode:
authorWilliam Roberts <bill.c.roberts@gmail.com>2012-06-07 11:52:51 -0400
committerStephen Smalley <sds@tycho.nsa.gov>2012-06-07 11:52:51 -0400
commitf6f87105d45795f284855ad69167ee704b08f4a9 (patch)
tree35d73baac7f9f3ea6c83009ffe56aad6100bcb97 /rild.te
parent80ea1d230526810986964e8c7ed93c3a51159c78 (diff)
downloadandroid_external_sepolicy-f6f87105d45795f284855ad69167ee704b08f4a9.tar.gz
android_external_sepolicy-f6f87105d45795f284855ad69167ee704b08f4a9.tar.bz2
android_external_sepolicy-f6f87105d45795f284855ad69167ee704b08f4a9.zip
Remove all denials caused by rild on tuna devices.
Tested on a maguro variant.
Diffstat (limited to 'rild.te')
-rw-r--r--rild.te8
1 files changed, 8 insertions, 0 deletions
diff --git a/rild.te b/rild.te
index e65fc36..85c85a5 100644
--- a/rild.te
+++ b/rild.te
@@ -12,12 +12,20 @@ allow rild self:capability { setuid net_admin net_raw };
allow rild alarm_device:chr_file rw_file_perms;
allow rild cgroup:dir create_dir_perms;
allow rild radio_device:chr_file rw_file_perms;
+allow rild radio_device:blk_file r_file_perms;
allow rild qemu_device:chr_file rw_file_perms;
allow rild mtd_device:dir search;
allow rild efs_file:dir create_dir_perms;
allow rild efs_file:file create_file_perms;
allow rild shell_exec:file rx_file_perms;
allow rild bluetooth_efs_file:file r_file_perms;
+allow rild radio_data_file:dir r_dir_perms;
+allow rild radio_data_file:file rw_file_perms;
+allow rild radio_device:lnk_file r_file_perms;
+allow rild sdcard:dir r_dir_perms;
+allow rild system_data_file:dir create_dir_perms;
+allow rild system_data_file:file create_file_perms;
+allow rild system_file:file x_file_perms;
dontaudit rild self:capability sys_admin;
# XXX Label sysfs files with a specific type?
allow rild sysfs:file rw_file_perms;