sepolicy/kernel.te

   1 allow kernel self:capability { chown mknod };
   2
   3 # /dev/mbin0
   4 allow kernel emmcblk_device:blk_file r_file_perms;
   5
   6 # /sys/devices/system/cpu/cpu[0-9]/cpufreq/*
   7 allow kernel sysfs_devices_system_cpu:file setattr;
   8
   9 # /efs contents
  10 allow kernel { app_efs_file battery_efs_file efs_file sensor_efs_file }:dir r_dir_perms;
  11 allow kernel { app_efs_file battery_efs_file efs_file sensor_efs_file }:file rw_file_perms;
  12
  13 # /efs/wifi/.mac.info
  14 r_dir_file(kernel, wifi_efs_file);
  15
  16 # /data/misc/conn/.wifiver.info
  17 allow kernel wifi_data_file:file rw_file_perms;
  18
  19 # Allow kernel to search tmpfs
  20 allow kernel tmpfs:dir search;
  21
  22 allow kernel self:capability sys_module;