sepolicy : Added allow rules for fm_radio and bluetooth .

fm_radio: Need access on /dev/radio node which include
read write and  ioctl . For enabling/disable  of fmradio
it need insmod persmission and set permission on property
controls .

bluetooth :  added access to the /dev/smd and permission to
do set property on bt control .

Change-Id: Ie348484b42be14d96b4dcee22c9f7c6561a3bd80
This commit is contained in:
Ravi Kumar Siddojigari
2014-09-04 20:35:57 +05:30
committed by Gerrit - the friendly Code Review server
parent b80b30af19
commit e4e0397860
4 changed files with 23 additions and 1 deletions

View File

@@ -37,4 +37,7 @@ BOARD_SEPOLICY_UNION := \
sensors_test.te \
system_app.te \
thermal-engine.te \
global_macros.te
global_macros.te \
system_app.te \
bluetooth.te \
init_shell.te

2
common/bluetooth.te Normal file
View File

@@ -0,0 +1,2 @@
#BT needes read and write on smd device node
allow bluetooth smd_device:chr_file rw_file_perms;

14
common/init_shell.te Normal file
View File

@@ -0,0 +1,14 @@
#for accessing fmradio device node
allow init_shell fm_radio_device:chr_file { open read ioctl };
# for insmod of iris ko , this is needed .
allow init_shell self:capability sys_module;
#for property starting with hw
allow init_shell system_prop:property_service set ;
#for access to set BT property
allow init_shell bluetooth_prop:property_service set;
#most of the default properties are set by init_shell
allow init_shell default_prop:property_service set;

3
common/system_app.te Normal file
View File

@@ -0,0 +1,3 @@
# fm_radio app needes open read write on fm_radio_device
allow system_app fm_radio_device:chr_file { read open ioctl};
allow system_app ctl_default_prop:property_service set;