Home | History | Annotate | Download | only in sepolicy
      1 typeattribute vendor_init data_between_core_and_vendor_violators;
      2 
      3 allow vendor_init proc_uid_cpupower:file write;
      4 
      5 # symlink /sdcard to backing block
      6 
      7 allow vendor_init debugfs_sps:dir search;
      8 allow vendor_init debugfs_sps:file w_file_perms;
      9 
     10 allow vendor_init {
     11   adb_keys_file
     12   dhcp_data_file
     13   display_data_file
     14   location_data_file
     15   media_rw_data_file
     16   netmgr_data_file
     17   perfd_data_file
     18   preloads_data_file
     19   preloads_media_file
     20   radio_data_file
     21   smlog_dump_file
     22   system_data_file
     23   time_data_file
     24   tombstone_data_file
     25   wifi_data_file
     26 }:dir { create search getattr open read setattr ioctl write add_name remove_name rmdir relabelfrom };
     27 
     28 allow vendor_init {
     29   adb_keys_file
     30   location_data_file
     31   perfd_data_file
     32   radio_data_file
     33 }:file { create getattr open read write setattr relabelfrom unlink };
     34 
     35 allow vendor_init {
     36   location_data_file
     37 }:sock_file setattr;
     38 
     39 set_prop(vendor_init, thermal_prop)
     40 set_prop(vendor_init, vendor_charge_prop)
     41 
     42 dontaudit vendor_init unlabeled:dir getattr;
     43 dontaudit vendor_init unlabeled:file getattr;
     44