From 1d6bb0a1e817ec5ffc35ad45b62c0a10856abb48 Mon Sep 17 00:00:00 2001 From: Danny Wood Date: Fri, 29 Nov 2019 11:46:22 +0000 Subject: [PATCH] universal7580: sepolicy: address GPSD denials Change-Id: Ic3ecfafa1641fa1c5e1166f5d9390e1497f397d4 --- sepolicy/gpsd.te | 4 ++++ sepolicy/init.te | 5 ++++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/sepolicy/gpsd.te b/sepolicy/gpsd.te index eb0afa7..60c4c2b 100644 --- a/sepolicy/gpsd.te +++ b/sepolicy/gpsd.te @@ -47,3 +47,7 @@ allow gpsd node:tcp_socket node_bind; # sec sysfs files #allow gpsd sysfs_sec:dir search; + +# hwservicemanager ready prop +allow gpsd hwservicemanager:binder call; +allow gpsd hwservicemanager_prop:file { open read getattr}; diff --git a/sepolicy/init.te b/sepolicy/init.te index 6a35a07..a86829e 100644 --- a/sepolicy/init.te +++ b/sepolicy/init.te @@ -44,7 +44,10 @@ allow init sysfs_bluetooth_writable:file setattr; # GPS permissions allow init sysfs_gps:lnk_file read; -allow init sysfs_gps:file setattr; +allow init sysfs_gps:file { rw_file_perms setattr }; +allow init gps_data_file:fifo_file write; +allow init gps_data_file:file lock; +allow init gps_device:chr_file { open read write }; # CPU permissions allow init sysfs_devices_system_cpu:file rw_file_perms; -- 2.20.1