platform_vendor_tequila/sepolicy/sysinit.te
Emerson Pinter dc699fb190 sepolicy: Permissions for userinit
Change-Id: Icaf9d191841a6214925729e40d84a61a2ebf2296
2015-03-17 12:12:59 +00:00

21 lines
772 B
Text

type sysinit, domain;
type sysinit_exec, exec_type, file_type;
init_daemon_domain(sysinit)
#============= sysinit ==============
allow sysinit devpts:chr_file { rw_file_perms };
allow sysinit shell_exec:file { rx_file_perms };
allow sysinit system_file:file { rx_file_perms };
allow sysinit self:process setcurrent;
userdebug_or_eng(`
allow sysinit userinit_data_exec:file { r_file_perms relabelto };
allow sysinit property_socket:sock_file write;
allow sysinit init:unix_stream_socket connectto;
allow sysinit userinit_prop:property_service set;
allow sysinit sysfs:file rw_file_perms;
allow sysinit sysfs_devices_system_cpu:file write;
allow sysinit self:capability dac_override;
allow sysinit userinit_exec:file { rx_file_perms };
')