tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "suspend: Allow access to /sys/power/wake_[un]lock" into tm-qpr-dev

Browse source
This commit is contained in:
Kalesh Singh 2023-01-26 20:46:14 +00:00 committed by Android (Google) Code Review
commit 192de674cf
2 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
prebuilts/api/33.0/private/system_suspend.te
View file

@ -29,6 +29,14 @@ allow system_suspend bluetooth:binder call;
allow system_suspend dumpstate:fd use;
allow system_suspend dumpstate:fifo_file write;
# Allow init to take kernel wakelock and system suspend to
# remove kenel wakelocks and the capability to access these
# files
allow init sysfs_wake_lock:file rw_file_perms;
allow init self:global_capability2_class_set block_suspend;
allow system_suspend sysfs_wake_lock:file rw_file_perms;
allow system_suspend self:global_capability2_class_set block_suspend;
neverallow {
domain
-atrace # tracing

8
private/system_suspend.te
View file

@ -29,6 +29,14 @@ allow system_suspend bluetooth:binder call;
allow system_suspend dumpstate:fd use;
allow system_suspend dumpstate:fifo_file write;
# Allow init to take kernel wakelock and system suspend to
# remove kenel wakelocks and the capability to access these
# files
allow init sysfs_wake_lock:file rw_file_perms;
allow init self:global_capability2_class_set block_suspend;
allow system_suspend sysfs_wake_lock:file rw_file_perms;
allow system_suspend self:global_capability2_class_set block_suspend;
neverallow {
domain
-atrace # tracing