path: root/sepolicy/priv_app.te (plain)
blob: 9d85b322a71f0adcd38b2a1585f25db90f5dcd57

1	allow priv_app fuseblk:dir { search };
2	allow priv_app fuseblk:file { read open getattr };
3	allow priv_app proc_modules:file { getattr read open };
4	allow priv_app proc_interrupts:file { getattr read open };
5
6	allow priv_app media_prop:file { read };
7	allow priv_app dvb_device:chr_file rw_file_perms;
8	#allow priv_app property_socket:sock_file { write };
9
10	#allow priv_app vendor_file:file { open read getattr execute };
11
12	allow priv_app zygote:dir { search read };
13	#allow priv_app zygote:file { open read };
14	allow priv_app device:dir { read search open };
15
16	allow priv_app proc_stat:file { getattr open };
17
18	allow priv_app { su_exec bootanim_exec bootstat_exec }:file { getattr };
19	allow priv_app proc_uptime:file read;
20
21	allow priv_app tvserver_hwservice:hwservice_manager { find };
22	allow priv_app systemcontrol_hwservice:hwservice_manager { find };
23	allow priv_app system_control:binder { call transfer };
24	allow priv_app tvserver:binder { call transfer };
25	allow priv_app param_tv_file:file { create open read write setattr getattr lock unlink };
26	allow priv_app param_tv_file:dir { search read open write add_name remove_name getattr };
27	allow priv_app sysfs_wifi:file r_file_perms;
28	allow priv_app debugfs_mali:dir search;
29
30	get_prop(priv_app, atv_prop)
31