land: address some denials

This commit is contained in:
Prateek Chaubey 2017-08-06 14:40:22 +02:00 committed by Darshan Manjrekar
parent cd4a0ca150
commit 5320556c8e
5 changed files with 8 additions and 0 deletions

1
sepolicy/ims.te Normal file
View file

@ -0,0 +1 @@
allow ims self:capability { net_raw net_admin };

2
sepolicy/init.te Normal file
View file

@ -0,0 +1,2 @@
allow init fingerprintd:binder { transfer call };
allow init gx_fpd_device:chr_file { write ioctl };

2
sepolicy/location.te Normal file
View file

@ -0,0 +1,2 @@
allow location sysfs_wake_lock:file { write open };
allow location diag_device:chr_file { read write };

1
sepolicy/radio.te Normal file
View file

@ -0,0 +1 @@
allow system_server radio_prop:property_service set;

2
sepolicy/system_app.te Normal file
View file

@ -0,0 +1,2 @@
# Allow binder calls to fingerprintd
binder_call(system_app, fingerprintd)