device_google_gs101/whitechapel/vendor/google/init-insmod-sh.te
Oleg Matcovschi 963848fdaa sepolicy:gs101: allow init-insmod-sh to access sysfs_leds nodes
Bug: 186788772
Signed-off-by: Oleg Matcovschi <omatcovschi@google.com>
Change-Id: I9cc44571eb5c8f52d6307bff9cb77f08712c5404
2021-04-29 14:34:55 -07:00

16 lines
540 B
Text

type init-insmod-sh, domain;
type init-insmod-sh_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(init-insmod-sh)
allow init-insmod-sh self:capability sys_module;
allow init-insmod-sh sysfs_leds:dir r_dir_perms;
allow init-insmod-sh vendor_kernel_modules:system module_load;
allow init-insmod-sh vendor_toolbox_exec:file execute_no_trans;
set_prop(init-insmod-sh, vendor_device_prop)
userdebug_or_eng(`
allow init-insmod-sh vendor_regmap_debugfs:dir search;
')
dontaudit init-insmod-sh proc_cmdline:file r_file_perms;