From b95e07609f73beb5019bad85eba8cb12a3fb4296 Mon Sep 17 00:00:00 2001 From: BrainKub Date: Fri, 17 Jan 2025 18:02:48 +0300 Subject: [PATCH] Spacewar: Sepolicy: allow glyph app to access battery supply Change-Id: Ifdbe1061ded2888140022b21eac589d44ca483c8 Signed-off-by: BrainKub --- sepolicy/private/glyph_app.te | 4 ---- sepolicy/public/glyph_app.te | 1 + sepolicy/vendor/glyph_app.te | 3 +++ 3 files changed, 4 insertions(+), 4 deletions(-) create mode 100644 sepolicy/public/glyph_app.te create mode 100644 sepolicy/vendor/glyph_app.te diff --git a/sepolicy/private/glyph_app.te b/sepolicy/private/glyph_app.te index bfc587e..48b7a0a 100644 --- a/sepolicy/private/glyph_app.te +++ b/sepolicy/private/glyph_app.te @@ -1,4 +1,3 @@ -type glyph_app, domain; typeattribute glyph_app mlstrustedsubject; app_domain(glyph_app) @@ -33,9 +32,6 @@ allow glyph_app system_app_data_file:{ allow glyph_app sysfs_leds:dir r_dir_perms; allow glyph_app sysfs_leds:file rw_file_perms; -allow glyph_app sysfs_powershare:dir r_dir_perms; -allow glyph_app sysfs_powershare:file r_file_perms; - allow glyph_app mnt_vendor_file:dir r_dir_perms; allow glyph_app mnt_vendor_file:file rw_file_perms; allow glyph_app thermal_service:service_manager find; diff --git a/sepolicy/public/glyph_app.te b/sepolicy/public/glyph_app.te new file mode 100644 index 0000000..96e5793 --- /dev/null +++ b/sepolicy/public/glyph_app.te @@ -0,0 +1 @@ +type glyph_app, domain; \ No newline at end of file diff --git a/sepolicy/vendor/glyph_app.te b/sepolicy/vendor/glyph_app.te new file mode 100644 index 0000000..c3ba28a --- /dev/null +++ b/sepolicy/vendor/glyph_app.te @@ -0,0 +1,3 @@ +allow glyph_app vendor_sysfs_battery_supply:dir search; +allow glyph_app vendor_sysfs_battery_supply:file { read open getattr }; +allow glyph_app sysfs_powershare:file rw_file_perms; \ No newline at end of file