diff options
| author | Steve Kondik <steve@cyngn.com> | 2015-11-16 19:11:50 -0800 |
|---|---|---|
| committer | Steve Kondik <steve@cyngn.com> | 2015-11-16 19:46:00 -0800 |
| commit | 2c3b5d353e14fe5daa024e416fc4c92f4fff516f (patch) | |
| tree | a26badff2c1764e5a309e9eed1a7400b7bc98d7c /sepolicy/domain.te | |
| parent | 816dec8fe919bd5002a6090a05ee0ea242bb72fe (diff) | |
| download | vendor_replicant-2c3b5d353e14fe5daa024e416fc4c92f4fff516f.tar.gz vendor_replicant-2c3b5d353e14fe5daa024e416fc4c92f4fff516f.tar.bz2 vendor_replicant-2c3b5d353e14fe5daa024e416fc4c92f4fff516f.zip | |
sepolicy: Remove some denials
* Allow apps to run the "df" command to look at disk usage.
* Allow thermal engine to check/set battery limits.
Change-Id: I67c863a82a94007e7a5e8ccfde9c095b7277ab84
Diffstat (limited to 'sepolicy/domain.te')
| -rw-r--r-- | sepolicy/domain.te | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/sepolicy/domain.te b/sepolicy/domain.te new file mode 100644 index 00000000..b1fc15ee --- /dev/null +++ b/sepolicy/domain.te @@ -0,0 +1,5 @@ +allow domain block_device:dir { search getattr }; +allow domain block_device:blk_file getattr; +allow domain cache_block_device:blk_file getattr; +allow domain userdata_block_device:blk_file getattr; +allow domain fuse_device:chr_file getattr; |