sepolicy_vndr: Allow init/vendor_init to write proc firmware config

Change-Id: Id0e64302dbbdc53620cbc1825c36e13bb9e58aef
LineageOS · Sep 24, 2024 · 43f02ac · 43f02ac
1 parent cc113d7
commit 43f02ac
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/generic/vendor/common/init.te b/generic/vendor/common/init.te
@@ -87,3 +87,5 @@ allow init vendor_sysfs_graphics:file w_file_perms;
 allow init vendor_sysfs_graphics:dir search;
 allow init vendor_sysfs_usb_device:file w_file_perms;
 ')
+
+allow init vendor_proc_firmware_cfg:file w_file_perms;
diff --git a/generic/vendor/common/vendor_init.te b/generic/vendor/common/vendor_init.te
@@ -30,6 +30,7 @@ allow vendor_init unlabeled:dir { r_dir_perms setattr relabelfrom };
 allow vendor_init unlabeled:file { r_file_perms setattr relabelfrom };
 allow vendor_init vendor_ipa_dev:chr_file w_file_perms;
 allow vendor_init proc:file write;
+allow vendor_init vendor_proc_firmware_cfg:file w_file_perms;
 
 allow vendor_init self:capability sys_module;