android_device_samsung_a20/universal7885-common/sepolicy/vendor/kernel.te
Gabriel2392 7329c87196
universal7885: Address SELinux denials
* Now boots with enforcing kernel
2022-03-22 18:32:07 +09:00

20 lines
622 B
Text

# kernel.te
# /vendor/firmware/
allow kernel vendor_firmware_file:dir r_dir_perms;
allow kernel vendor_firmware_file:file r_file_perms;
allow kernel app_efs_file:dir search;
allow kernel app_efs_file:file open;
allow kernel sensor_factoryapp_efs_file:file open;
allow kernel efs_file:dir search;
allow kernel device:chr_file { getattr setattr unlink create };
allow kernel device:dir create_dir_perms;
allow kernel self:capability { sys_rawio mknod };
allow kernel block_device:dir search;
allow kernel sysfs_sec_key:dir search;
r_dir_file(kernel, sysfs_virtual)
allow kernel loop_device:blk_file { create setattr };