diff options
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/hal_graphics_composer_default.te | 2 | ||||
| -rw-r--r-- | sepolicy/proc_net.te | 1 | ||||
| -rw-r--r-- | sepolicy/property.te | 2 | ||||
| -rw-r--r-- | sepolicy/system_app.te | 1 | ||||
| -rw-r--r-- | sepolicy/untrusted_app.te | 1 |
5 files changed, 1 insertions, 6 deletions
diff --git a/sepolicy/hal_graphics_composer_default.te b/sepolicy/hal_graphics_composer_default.te index 387e0d1..31d5438 100644 --- a/sepolicy/hal_graphics_composer_default.te +++ b/sepolicy/hal_graphics_composer_default.te @@ -12,8 +12,6 @@ allow hal_graphics_composer_default hi_vdec_device:chr_file { read write open io allow hal_graphics_composer_default hi_pq_device:chr_file { read write open ioctl}; allow hal_graphics_composer_default hi_disp_device:chr_file { read write open ioctl}; allow hal_graphics_composer_default hi_sys_device:chr_file { read write open ioctl}; -allow hal_graphics_composer_default system_prop:property_service { set }; -allow hal_graphics_composer_default config_prop:property_service { set }; allow hal_graphics_composer_default vndbinder_device:chr_file { read write open ioctl }; #allow hal_graphics_composer_default hal_graphics_allocator_hwservice:hwservice_manager { find }; allow hal_graphics_composer_default hal_graphics_allocator_default:binder { call }; diff --git a/sepolicy/proc_net.te b/sepolicy/proc_net.te deleted file mode 100644 index 671a224..0000000 --- a/sepolicy/proc_net.te +++ /dev/null @@ -1 +0,0 @@ -allow proc_net proc:filesystem { associate }; diff --git a/sepolicy/property.te b/sepolicy/property.te index 0d5e944..a0a67e0 100644 --- a/sepolicy/property.te +++ b/sepolicy/property.te @@ -1,3 +1,3 @@ -type hisi_prop, property_type; +vendor_public_prop(hisi_prop) get_prop(domain, hisi_prop) diff --git a/sepolicy/system_app.te b/sepolicy/system_app.te index 28378ca..24fbe74 100644 --- a/sepolicy/system_app.te +++ b/sepolicy/system_app.te @@ -1,4 +1,3 @@ -set_prop(system_app, hisi_prop) allow system_app mali_device:chr_file { getattr ioctl open read write }; allow system_app hi_vdec_device:chr_file { getattr read write open ioctl }; diff --git a/sepolicy/untrusted_app.te b/sepolicy/untrusted_app.te index ffb9336..4035dd4 100644 --- a/sepolicy/untrusted_app.te +++ b/sepolicy/untrusted_app.te @@ -19,7 +19,6 @@ allow untrusted_app { audio_device tombstone_data_file }:dir { getattr read search }; allow untrusted_app hi_userdata_block_device:blk_file { getattr }; -allow untrusted_app fs_bpf:dir { add_name search write }; allow untrusted_app block_device:{ dir blk_file } { getattr }; allow untrusted_app mali_device:chr_file { getattr ioctl open read write }; allow untrusted_app pstorefs:dir { search }; |