sepolicy/whitechapel/vendor/google/init-insmod-sh.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

type init-insmod-sh, domain;
type init-insmod-sh_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(init-insmod-sh)

allow init-insmod-sh self:capability sys_module;
allow init-insmod-sh sysfs_leds:dir r_dir_perms;
allow init-insmod-sh vendor_kernel_modules:system module_load;
allow init-insmod-sh vendor_toolbox_exec:file execute_no_trans;

allow init-insmod-sh self:capability sys_nice;
allow init-insmod-sh kernel:process setsched;

set_prop(init-insmod-sh, vendor_device_prop)

userdebug_or_eng(`
  allow init-insmod-sh vendor_regmap_debugfs:dir search;
')

dontaudit init-insmod-sh proc_cmdline:file r_file_perms;