summaryrefslogtreecommitdiff
path: root/non_plat/mnld.te
diff options
context:
space:
mode:
authorTianfang Li <tianfang.li@mediatek.com>2020-03-17 14:55:37 +0800
committerTianfang Li <tianfang.li@mediatek.com>2020-03-19 14:37:25 +0800
commit4be9097e59a2bc26e1cdb3cd315d75da7846a1e7 (patch)
treee89d08bbf43666a671bf3a09526e6fdcb9b7c80f /non_plat/mnld.te
parentfd69a749c7e0adf3b8c26bed75a4d2279a257eb3 (diff)
downloadwembley-sepolicy-4be9097e59a2bc26e1cdb3cd315d75da7846a1e7.tar.gz
[ALPS05037435] GPS:android R migration
android R migration Change-Id: Ifd1b0e69e16f98becd493a355cfc4238fd9291cc CR-Id: ALPS05037435 Feature: Location Chipset Capability
Diffstat (limited to 'non_plat/mnld.te')
-rw-r--r--non_plat/mnld.te17
1 files changed, 11 insertions, 6 deletions
diff --git a/non_plat/mnld.te b/non_plat/mnld.te
index 11fe7a4..46f73ae 100644
--- a/non_plat/mnld.te
+++ b/non_plat/mnld.te
@@ -37,7 +37,6 @@ allow mnld mnld_data_file:file rw_file_perms;
allow mnld mnld_data_file:file create_file_perms;
allow mnld mnld_data_file:fifo_file create_file_perms;
# Purpose : For init process
-allow mnld init:unix_stream_socket connectto;
allow mnld init:udp_socket { read write };
# Send the message to the LBS HIDL Service to forward to applications
@@ -47,10 +46,8 @@ allow mnld lbs_hidl_service:unix_dgram_socket sendto;
allow mnld merged_hal_service:unix_dgram_socket sendto;
# Purpose : For access system data
-allow mnld bootdevice_block_device:blk_file rw_file_perms;
allow mnld block_device:dir search;
-allow mnld mnld_prop:property_service set;
-allow mnld property_socket:sock_file write;
+set_prop(mnld, mnld_prop);
allow mnld mdlog_device:chr_file { read write };
allow mnld self:capability { fsetid };
allow mnld stpbt_device:chr_file { read write };
@@ -68,12 +65,11 @@ allow mnld tmpfs:lnk_file { read create open };
allow mnld mtd_device:dir search;
allow mnld mnt_user_file:lnk_file read;
allow mnld mnt_user_file:dir search;
-allow mnld gps_data_file:dir { write add_name search remove_name unlink};
+allow mnld gps_data_file:dir { create_dir_perms unlink };
allow mnld gps_data_file:file { read write open create getattr append setattr unlink lock rename };
allow mnld gps_data_file:lnk_file read;
allow mnld storage_file:lnk_file read;
-allow mnld nvcfg_file:dir search;
# Date : WK15.30
# Operation : Migration
@@ -100,3 +96,12 @@ allow mnld atci_service:unix_dgram_socket sendto;
allow mnld sysfs_boot_mode:file { read open };
set_prop(mnld, vendor_radio_prop);
+
+allow mnld proc_cmdline:file r_file_perms;
+allow mnld sysfs_dt_firmware_android:dir search;
+allow mnld sysfs_dt_firmware_android:file r_file_perms;
+allow mnld metadata_file:dir search;
+
+#Add for /nvcfg/almanac.dat
+allow mnld nvcfg_file:dir w_dir_perms;
+allow mnld nvcfg_file:file create_file_perms;