diff options
author | Davide Garberi <dade.garberi@gmail.com> | 2019-09-19 19:43:48 +0200 |
---|---|---|
committer | Michael Bestas <mkbestas@lineageos.org> | 2020-04-30 00:48:53 +0300 |
commit | 1aa2263a21d2f4059af70f0b8615ea006024baeb (patch) | |
tree | 1a920edcdaee1b8b7c86315824b5e84a10c3902f /sepolicy/vendor | |
parent | fb2de9c6e2d161d3b8fc3532bae0ce2dcef34e41 (diff) |
sdm660-common: biometrics: Address fingerprint denials
* Mostly just for goodix
Change-Id: Ia8fb90fca742a220e31f206b344026c69e751bb0
Diffstat (limited to 'sepolicy/vendor')
-rw-r--r-- | sepolicy/vendor/init_fingerprint.te | 4 | ||||
-rw-r--r-- | sepolicy/vendor/tee.te | 2 |
2 files changed, 5 insertions, 1 deletions
diff --git a/sepolicy/vendor/init_fingerprint.te b/sepolicy/vendor/init_fingerprint.te index b45cdd6..9ef78c4 100644 --- a/sepolicy/vendor/init_fingerprint.te +++ b/sepolicy/vendor/init_fingerprint.te @@ -11,4 +11,6 @@ allow init_fingerprint vendor_toolbox_exec:file rx_file_perms; # Allow to delete file allow init_fingerprint persist_file:dir search; allow init_fingerprint persist_drm_file:dir { read search open write remove_name }; -allow init_fingerprint persist_drm_file:file { getattr unlink };
\ No newline at end of file +allow init_fingerprint persist_drm_file:file { getattr unlink }; + +allow init_fingerprint system_data_file:file getattr; diff --git a/sepolicy/vendor/tee.te b/sepolicy/vendor/tee.te index 0a124bc..6c2c9b1 100644 --- a/sepolicy/vendor/tee.te +++ b/sepolicy/vendor/tee.te @@ -4,3 +4,5 @@ typeattribute tee data_between_core_and_vendor_violators; allow tee system_data_file:dir r_dir_perms; allow tee fingerprintd_data_file:dir rw_dir_perms; allow tee fingerprintd_data_file:file create_file_perms; +allow tee vendor_data_file:file { read open unlink }; +allow tee vendor_data_file:dir { write remove_name read }; |