selinux: sensorsd can't run in init context, give it one

Change-Id: Ic95d54dfdcde32ad8171bb0369b0d96aa23ee137
11 years ago · ece8ff6556
parent 35b1a16edd
commit ece8ff6556
4 changed files with 15 additions and 0 deletions
--- a/BoardConfig.mk
+++ b/BoardConfig.mk
@ -63,5 +63,10 @@ TARGET_OTA_ASSERT_DEVICE := crackling,vixen

 TARGET_SYSTEM_PROP += $(DEVICE_PATH)/system.prop

+# SELinux
+BOARD_SEPOLICY_DIRS += \
+    device/wileyfox/crackling/sepolicy
+
+
 # inherit from the proprietary version
 -include vendor/wileyfox/crackling/BoardConfigVendor.mk
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@ -0,0 +1,2 @@
+/system/bin/sensord                        u:object_r:sensors_exec:s0
+/data/misc/sensor(/.*)?                                            u:object_r:sensors_data_file:s0
--- a/sepolicy/sensors.te
+++ b/sepolicy/sensors.te
@ -0,0 +1,5 @@
+allow sensors sensors_data_file:fifo_file create_file_perms;
+allow sensors sysfs:file rw_file_perms;
+allow sensors input_device:dir r_dir_perms;
+allow sensors input_device:chr_file r_file_perms;
+
--- a/sepolicy/system_server.te
+++ b/sepolicy/system_server.te
@ -0,0 +1,3 @@
+allow system_server sensors_data_file:dir r_dir_perms;
+allow system_server sensors_data_file:file rw_file_perms;
+allow system_server sensors_data_file:fifo_file rw_file_perms;