parent
15bf2f2822
commit
a6fb204f84
45 changed files with 514 additions and 0 deletions
23
sepolicy/vendor/init.te
vendored
Normal file
23
sepolicy/vendor/init.te
vendored
Normal file
|
|
@ -0,0 +1,23 @@
|
|||
# Super modem mounting
|
||||
allow fsg_file self:filesystem associate;
|
||||
allow init fsg_file:dir mounton;
|
||||
allow init fsg_file:filesystem { getattr mount relabelfrom unmount };
|
||||
allow init firmware_file:filesystem unmount;
|
||||
|
||||
# Allow init to access loop devices
|
||||
allow init loop_device:blk_file { create setattr unlink };
|
||||
allowxperm init loop_device:blk_file ioctl {
|
||||
LOOP_GET_STATUS64
|
||||
LOOP_GET_STATUS
|
||||
LOOP_SET_STATUS64
|
||||
LOOP_SET_STATUS
|
||||
BLKFLSBUF
|
||||
};
|
||||
|
||||
# Product persist
|
||||
allow init mnt_product_file:dir mounton;
|
||||
|
||||
recovery_only(`
|
||||
allow init self:capability sys_module;
|
||||
allow init rootfs:system module_load;
|
||||
')
|
||||
Loading…
Add table
Add a link
Reference in a new issue