device_google_zuma/vendor/kernel.te
Wilson Sung 3657f78cb0 Add kernel vendor_fw_file dir read permission
Fix: 288049349
Change-Id: I76751deb04e5b6a4362917c76764cddc74d0f76d
2023-06-21 16:02:41 +08:00

21 lines
677 B
Text

allow kernel vendor_fw_file:dir r_dir_perms;
allow kernel vendor_fw_file:file r_file_perms;
# ZRam
allow kernel per_boot_file:file r_file_perms;
# memlat needs permision to create/delete perf events when hotplug on/off
allow kernel self:capability2 perfmon;
allow kernel self:perf_event cpu;
no_debugfs_restriction(`
allow kernel vendor_battery_debugfs:dir search;
')
dontaudit kernel vendor_maxfg_debugfs:dir search;
dontaudit kernel sepolicy_file:file getattr;
dontaudit kernel system_bootstrap_lib_file:dir getattr;
dontaudit kernel system_bootstrap_lib_file:file getattr;
dontaudit kernel system_dlkm_file:dir getattr;
allow kernel vendor_regmap_debugfs:dir search;