android_device_motorola_sm6.../sepolicy/vendor/init.te
Anand S 3092927bb5
sm6375-common: sepolicy: Address some denials for fogos
Change-Id: I3ab1949c10eb3313a3fb701bbddeffb4bf15237c
2024-07-21 20:16:00 +05:30

27 lines
718 B
Text

# Super modem mounting
allow fsg_file self:filesystem associate;
allow init fsg_file:dir mounton;
allow init fsg_file:filesystem { getattr mount relabelfrom unmount };
allow init firmware_file:filesystem unmount;
# Allow init to access loop devices
allow init loop_device:blk_file { create setattr unlink };
allowxperm init loop_device:blk_file ioctl {
LOOP_GET_STATUS64
LOOP_GET_STATUS
LOOP_SET_STATUS64
LOOP_SET_STATUS
BLKFLSBUF
};
# Product persist
allow init mnt_product_file:dir mounton;
recovery_only(`
allow init self:capability sys_module;
allow init rootfs:system module_load;
')
allow init vendor_sysfs_vibrator:file create_file_perms;
allow init vendor_sysfs_scsi_host:file w_file_perms;