pipa: address SELinux issues with peripheralmanager, xiaomikeyboard
This commit is contained in:
1
sepolicy/vendor/file.te
vendored
Normal file
1
sepolicy/vendor/file.te
vendored
Normal file
@@ -0,0 +1 @@
|
||||
type xiaomi_keyboard_conf_file, file_type;
|
||||
2
sepolicy/vendor/file_contexts
vendored
2
sepolicy/vendor/file_contexts
vendored
@@ -9,3 +9,5 @@
|
||||
|
||||
# Xiaomi Keyboard
|
||||
/dev/nanodev0 u:object_r:xiaomi_keyboard_device:s0
|
||||
|
||||
/data/misc/xiaomi_keyboard.conf u:object_r:xiaomi_keyboard_conf_file:s0
|
||||
1
sepolicy/vendor/system_app.te
vendored
1
sepolicy/vendor/system_app.te
vendored
@@ -1 +1,2 @@
|
||||
set_prop(system_app, vendor_pen_prop)
|
||||
allow system_app xiaomi_keyboard_conf_file:file { read write open getattr };
|
||||
4
sepolicy/vendor/xiaomi_keyboard.te
vendored
4
sepolicy/vendor/xiaomi_keyboard.te
vendored
@@ -21,4 +21,6 @@ allow xiaomi_keyboard servicemanager:binder { call transfer };
|
||||
|
||||
# Additional diagnostic permissions
|
||||
allow xiaomi_keyboard sysfs:dir { read open };
|
||||
allow xiaomi_keyboard sysfs_devices_system_cpu:file { read open };
|
||||
allow xiaomi_keyboard sysfs_devices_system_cpu:file { read open };
|
||||
|
||||
allow xiaomi_keyboard xiaomi_keyboard_conf_file:file { read open };
|
||||
Reference in New Issue
Block a user