sepolicy/init.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14

# allow insmod
allow init self:capability sys_module;

# chmod/chown rfkill device
allow init sysfs_bluetooth_writable:file getattr;

# allow creating /sdcard symlink
allow init tmpfs:lnk_file create;

# For mounting debugfs
allow init debugfs:dir mounton;

# For 'cpuset' module requests
allow init kernel:system module_request;