sepolicy: address some denials.

Closes #42
ananwoy · Mar 13, 2017 · 016e075 · 016e075
1 parent b290e48
commit 016e075
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/sepolicy/log.te b/sepolicy/log.te
@@ -1 +1,3 @@
 allow logd unlabeled:dir search;
+allow logd self:capability { dac_override dac_read_search };
+
diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
@@ -4,4 +4,6 @@ allow system_server proc_touchpanel:file rw_file_perms;
 allow system_server sensors_persist_file:file r_file_perms;
 allow system_server sensors_persist_file:dir search;
 allow system_server proc_stat:file r_file_perms;
+allow system_server unlabeled:file unlink;
 get_prop(system_server, diag_prop);
+
diff --git a/sepolicy/zygote.te b/sepolicy/zygote.te
@@ -1,2 +1,3 @@
 allow zygote input_device:dir r_dir_perms;
 allow zygote input_device:chr_file rw_file_perms;
+allow zygote self:capability sys_nice;
Original file line number	Diff line number	Diff line change
		@@ -1 +1,3 @@
		allow logd unlabeled:dir search;
		allow logd self:capability { dac_override dac_read_search };