diff options
Diffstat (limited to 'selinux/cpboot-daemon.te')
-rw-r--r-- | selinux/cpboot-daemon.te | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/selinux/cpboot-daemon.te b/selinux/cpboot-daemon.te index eab7ee6..26b877c 100644 --- a/selinux/cpboot-daemon.te +++ b/selinux/cpboot-daemon.te @@ -6,6 +6,8 @@ domain_trans(init, rootfs, cpboot-daemon) dontaudit cpboot-daemon usbfs:dir search; dontaudit cpboot-daemon usbfs:filesystem mount; dontaudit cpboot-daemon self:capability mknod; +dontaudit cpboot-daemon device:chr_file { read write create unlink open }; +dontaudit cpboot-daemon device:dir { write add_name remove_name }; allow cpboot-daemon cgroup:dir { create add_name }; allow cpboot-daemon efs_file:file { read write open }; @@ -16,6 +18,4 @@ allow cpboot-daemon radio_prop:property_service set; allow cpboot-daemon self:capability { setuid dac_override }; allow cpboot-daemon sysfs:file write; allow cpboot-daemon userdata_block_device:blk_file { read open }; -allow cpboot-daemon efs_file:dir search; -allow cpboot-daemon efs_file:file { read write }; -allow cpboot-daemon device:dir { write };
\ No newline at end of file +allow cpboot-daemon efs_file:dir search;
\ No newline at end of file |