| Ravi Kumar Siddojigari | 5c426bf | 2014-09-08 20:57:41 +0530 | [diff] [blame] | 1 | # Adding allow rule for search on /fuse |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 2 | allow init fuse:dir { search mounton }; |
| Avijit Kanti Das | d01b3b3 | 2014-10-21 10:30:09 -0700 | [diff] [blame] | 3 | allow init self:capability sys_module; |
| Avijit Kanti Das | 19272f3 | 2015-08-10 14:30:34 -0700 | [diff] [blame] | 4 | allow init { |
| 5 | adsprpcd_file |
| 6 | cache_file |
| 7 | persist_file |
| 8 | storage_file |
| 9 | }:dir mounton; |
| 10 | allow init kmsg_device:chr_file write; |
| Avijit Kanti Das | fec952f | 2015-08-14 15:39:51 -0700 | [diff] [blame] | 11 | |
| William Clark | 2c0774d | 2015-09-25 14:14:52 -0700 | [diff] [blame] | 12 | #For insmod to search module key for signature verification |
| 13 | allow init kernel:key search; |
| 14 | |
| Avijit Kanti Das | fec952f | 2015-08-14 15:39:51 -0700 | [diff] [blame] | 15 | #For sdcard |
| 16 | allow init tmpfs:lnk_file create_file_perms; |
| Sanket Khidkikar | 2e10de3 | 2015-10-05 20:26:00 -0700 | [diff] [blame^] | 17 | |
| 18 | #Certain domains needs LD_PRELOAD passed from init |
| 19 | #allow it for most domain. Do not honor LD_PRELOAD |
| 20 | #for lmkd |
| 21 | allow init { domain -lmkd }:process noatsecure; |