Alex Klyubin | 3b1b700 | 2017-08-23 12:31:20 -0700 | [diff] [blame] | 1 | # /dev/tty* I/O. Needed for /dev/ttyS0 |
| 2 | allow init serial_device:chr_file rw_file_perms; |
| 3 | |
| 4 | # Write to /configfs files. Needed only for /config/usb_gadget subtree. |
| 5 | allow init configfs:file w_file_perms; |
| 6 | allow init configfs:lnk_file create; |
| 7 | |
| 8 | # Add loadable modules. Needed for usbfunc:diag, usbfunc:diag, usbfunc:gsi, usbfunc:qdss modules. |
| 9 | allow init kernel:system module_request; |
Alistair Strachan | 40deb66 | 2019-03-23 14:43:57 -0700 | [diff] [blame] | 10 | |
| 11 | # binfmt_misc arm for ndk translator |
| 12 | allow init binfmt_miscfs:file w_file_perms; |
| 13 | allow init proc:dir mounton; |
Tri Vo | 05780b2 | 2019-05-09 10:23:41 -0700 | [diff] [blame] | 14 | |
Alistair Delva | b8fb0e2 | 2021-02-24 15:50:59 +0000 | [diff] [blame] | 15 | # init relabel vbmeta* symlinks |
Yifan Hong | 5bcb96e | 2020-06-05 10:58:23 -0700 | [diff] [blame] | 16 | allow init ab_block_device:lnk_file relabelto; |
| 17 | |
Tri Vo | 05780b2 | 2019-05-09 10:23:41 -0700 | [diff] [blame] | 18 | # /mnt/sdcard -> /storage/self/primary symlink is deprecated. Ignore attempts to |
| 19 | # create it. This denial is fixed in core policy in Android R aosp/943799. |
| 20 | dontaudit init tmpfs:lnk_file create; |
Alistair Delva | 5c490d4 | 2020-07-22 19:39:55 -0700 | [diff] [blame] | 21 | |
| 22 | # permit mount of virtiofs on /mnt/vendor/shared |
| 23 | allow init mnt_vendor_file:dir mounton; |
A. Cody Schuffelen | 4a8e187 | 2020-10-09 16:52:37 -0700 | [diff] [blame] | 24 | |
| 25 | allow init keymaster_device:chr_file rw_file_perms; |
| 26 | allow init gatekeeper_device:chr_file rw_file_perms; |
Jeongik Cha | 902143b | 2021-02-24 22:22:29 +0900 | [diff] [blame] | 27 | allow init bt_device:chr_file rw_file_perms; |
A. Cody Schuffelen | 84c918a | 2020-12-16 20:57:03 -0800 | [diff] [blame] | 28 | |
| 29 | allow init frp_block_device:blk_file setattr; |