unplugged-vendor/device/google/sunfish-sepolicy/vendor/qcom/common/kernel.te

21 lines
660 B
Plaintext
Raw Normal View History

# For diag over socket
allow kernel self:qipcrtr_socket create;
userdebug_or_eng(`
allow kernel debugfs_wlan:dir search;
allow kernel debugfs_ipc:dir search;
')
allow kernel debugfs_pmic:dir create_dir_perms;
allow kernel debugfs_pmic:file create_file_perms;
dontaudit kernel self:qipcrtr_socket create;
dontaudit kernel debugfs_wlan:dir search;
dontaudit kernel debugfs_ipc:dir search;
# TODO(b/132393658): remove redundant log during selinux setup
dontaudit kernel self:capability sys_admin;
dontaudit kernel sepolicy_file:file getattr;
dontaudit kernel system_bootstrap_lib_file:dir getattr;
dontaudit kernel system_bootstrap_lib_file:file getattr;