blob: 7f362ef8ac129efbd4699b3933312fe05d397d94 [file] [log] [blame]
Alex Klyubin3b1b7002017-08-23 12:31:20 -07001# /dev/tty* I/O. Needed for /dev/ttyS0
2allow init serial_device:chr_file rw_file_perms;
3
4# Write to /configfs files. Needed only for /config/usb_gadget subtree.
5allow init configfs:file w_file_perms;
6allow init configfs:lnk_file create;
7
8# Add loadable modules. Needed for usbfunc:diag, usbfunc:diag, usbfunc:gsi, usbfunc:qdss modules.
9allow init kernel:system module_request;
Alistair Strachan40deb662019-03-23 14:43:57 -070010
11# binfmt_misc arm for ndk translator
12allow init binfmt_miscfs:file w_file_perms;
13allow init proc:dir mounton;
Tri Vo05780b22019-05-09 10:23:41 -070014
Alistair Delvab8fb0e22021-02-24 15:50:59 +000015# init relabel vbmeta* symlinks
Yifan Hong5bcb96e2020-06-05 10:58:23 -070016allow init ab_block_device:lnk_file relabelto;
17
Tri Vo05780b22019-05-09 10:23:41 -070018# /mnt/sdcard -> /storage/self/primary symlink is deprecated. Ignore attempts to
19# create it. This denial is fixed in core policy in Android R aosp/943799.
20dontaudit init tmpfs:lnk_file create;
Alistair Delva5c490d42020-07-22 19:39:55 -070021
22# permit mount of virtiofs on /mnt/vendor/shared
23allow init mnt_vendor_file:dir mounton;
A. Cody Schuffelen4a8e1872020-10-09 16:52:37 -070024
25allow init keymaster_device:chr_file rw_file_perms;
26allow init gatekeeper_device:chr_file rw_file_perms;
Jeongik Cha902143b2021-02-24 22:22:29 +090027allow init bt_device:chr_file rw_file_perms;
A. Cody Schuffelen84c918a2020-12-16 20:57:03 -080028
29allow init frp_block_device:blk_file setattr;