Skip to content
Snippets Groups Projects
Commit 6a64897a authored by William Roberts's avatar William Roberts Committed by Gerrit Code Review
Browse files

Do not allow access to device:chr_file for system

Also labels /dev/mpu and /dev/mpuirq as gps device.
mpu is motion processing unit and is resposible for
gyroscope functionality.

Change-Id: If7f1a5752c550b72fac681566e1052f09e139ff0
parent 1c8464e1
No related branches found
No related tags found
No related merge requests found
...@@ -55,6 +55,8 @@ ...@@ -55,6 +55,8 @@
/dev/log(/.*)? u:object_r:log_device:s0 /dev/log(/.*)? u:object_r:log_device:s0
/dev/mem u:object_r:kmem_device:s0 /dev/mem u:object_r:kmem_device:s0
/dev/modem.* u:object_r:radio_device:s0 /dev/modem.* u:object_r:radio_device:s0
/dev/mpu u:object_r:gps_device:s0
/dev/mpuirq u:object_r:gps_device:s0
/dev/mtd(/.*)? u:object_r:mtd_device:s0 /dev/mtd(/.*)? u:object_r:mtd_device:s0
/dev/mtd/mtd5 u:object_r:radio_device:s0 /dev/mtd/mtd5 u:object_r:radio_device:s0
/dev/mtd/mtd5ro u:object_r:radio_device:s0 /dev/mtd/mtd5ro u:object_r:radio_device:s0
......
...@@ -143,7 +143,6 @@ allow system sysfs_nfc_power_writable:file rw_file_perms; ...@@ -143,7 +143,6 @@ allow system sysfs_nfc_power_writable:file rw_file_perms;
# Access devices. # Access devices.
allow system device:dir r_dir_perms; allow system device:dir r_dir_perms;
allow system device:chr_file rw_file_perms;
allow system device:sock_file rw_file_perms; allow system device:sock_file rw_file_perms;
allow system akm_device:chr_file rw_file_perms; allow system akm_device:chr_file rw_file_perms;
allow system accelerometer_device:chr_file rw_file_perms; allow system accelerometer_device:chr_file rw_file_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment