rapahel:sepolicy:Fix multiple denials

aoleary · Mar 17, 2024 · fe5165c · fe5165c
1 parent 937eca9
commit fe5165c
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/sepolicy/vendor/hal_wifi_default.te b/sepolicy/vendor/hal_wifi_default.te
@@ -0,0 +1 @@
+get_prop(hal_wifi_default, persist_vendor_debug_wifi_prop)
diff --git a/sepolicy/vendor/kernel.te b/sepolicy/vendor/kernel.te
@@ -5,5 +5,7 @@ userdebug_or_eng(`
 # Ignore the socket if it fails to create
 dontaudit kernel self:qipcrtr_socket create;
 
+dontaudit kernel self:capability { dac_override dac_read_search };
+
 allow kernel per_boot_file:file r_file_perms;
 allow kernel system_data_file:file { read };
diff --git a/sepolicy/vendor/rild.te b/sepolicy/vendor/rild.te
@@ -0,0 +1,2 @@
+get_prop(rild, vendor_pd_locater_dbg_prop)
+get_prop(rild, vendor_persist_rcs_prop)
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		get_prop(hal_wifi_default, persist_vendor_debug_wifi_prop)
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		get_prop(rild, vendor_pd_locater_dbg_prop)
		get_prop(rild, vendor_persist_rcs_prop)