diff options
| -rw-r--r-- | BoardConfigCommon.mk | 1 | ||||
| -rw-r--r-- | sepolicy/recovery.te | 11 |
2 files changed, 12 insertions, 0 deletions
diff --git a/BoardConfigCommon.mk b/BoardConfigCommon.mk index 27924d0..115844d 100644 --- a/BoardConfigCommon.mk +++ b/BoardConfigCommon.mk @@ -96,6 +96,7 @@ BOARD_SEPOLICY_UNION += \ keystore.te \ lmkd.te \ mediaserver.te \ + recovery.te \ rild.te \ sensors_config.te \ surfaceflinger.te \ diff --git a/sepolicy/recovery.te b/sepolicy/recovery.te new file mode 100644 index 0000000..6f20993 --- /dev/null +++ b/sepolicy/recovery.te @@ -0,0 +1,11 @@ +recovery_only(` + allow recovery ctl_rildaemon_prop:property_service set; + allow recovery device:dir rw_dir_perms; + allow recovery rootfs:dir rw_dir_perms; + allow recovery rootfs:file create_file_perms; + allow recovery sysfs_devices_system_cpu:file rw_file_perms; + allow recovery self:capability mknod; + allow recovery usbfs:dir rw_dir_perms; + allow recovery device:chr_file create_file_perms; +') + |