summaryrefslogtreecommitdiff
path: root/sepolicy/whitechapel/vendor/google/init-insmod-sh.te
diff options
context:
space:
mode:
Diffstat (limited to 'sepolicy/whitechapel/vendor/google/init-insmod-sh.te')
-rw-r--r--sepolicy/whitechapel/vendor/google/init-insmod-sh.te19
1 files changed, 19 insertions, 0 deletions
diff --git a/sepolicy/whitechapel/vendor/google/init-insmod-sh.te b/sepolicy/whitechapel/vendor/google/init-insmod-sh.te
new file mode 100644
index 00000000..0e60196e
--- /dev/null
+++ b/sepolicy/whitechapel/vendor/google/init-insmod-sh.te
@@ -0,0 +1,19 @@
+type init-insmod-sh, domain;
+type init-insmod-sh_exec, vendor_file_type, exec_type, file_type;
+init_daemon_domain(init-insmod-sh)
+
+allow init-insmod-sh self:capability sys_module;
+allow init-insmod-sh sysfs_leds:dir r_dir_perms;
+allow init-insmod-sh vendor_kernel_modules:system module_load;
+allow init-insmod-sh vendor_toolbox_exec:file execute_no_trans;
+
+allow init-insmod-sh self:capability sys_nice;
+allow init-insmod-sh kernel:process setsched;
+
+set_prop(init-insmod-sh, vendor_device_prop)
+
+userdebug_or_eng(`
+ allow init-insmod-sh vendor_regmap_debugfs:dir search;
+')
+
+dontaudit init-insmod-sh proc_cmdline:file r_file_perms;