diff --git a/bluetooth.te b/bluetooth.te index e4b3ff71dc86fbfbd6776d9bef82a173d82edd45..6ff7f48637638665188c560a779add479559a300 100644 --- a/bluetooth.te +++ b/bluetooth.te @@ -20,6 +20,7 @@ allow bluetooth { uhid_device hci_attach_dev }:chr_file rw_file_perms; allow bluetooth sysfs_bluetooth_writable:file rw_file_perms; allow bluetooth self:capability net_admin; allow bluetooth self:capability2 wake_alarm; +wakelock_use(bluetooth); # tethering allow bluetooth self:tun_socket create_socket_perms; @@ -57,6 +58,6 @@ allow bluetooth shell_data_file:file read; ### # Superuser capabilities. -# bluetooth requires net_admin and wake_alarm. +# bluetooth requires net_admin, wake_alarm and block_suspend neverallow bluetooth self:capability ~net_admin; -neverallow bluetooth self:capability2 ~wake_alarm; +neverallow bluetooth self:capability2 ~{wake_alarm block_suspend};