Files
Stricted 9a2030010d [WIP]start this selinux mess
* taken from https://github.com/lineage-geminipda/android_device_planet_geminipda

Change-Id: I80708a4650646ecd870b60217cafc0212aa2022e
(cherry picked from commit ce9dd0181db0cdeabb9edaf3781d74fb6645bb98)
2021-01-17 01:13:03 +00:00

15 lines
462 B
Plaintext

type ged_srv, domain, domain_deprecated;
type ged_srv_exec, exec_type, file_type;
init_daemon_domain(ged_srv)
binder_use(ged_srv)
binder_service(ged_srv)
binder_call(ged_srv, system_server)
allow ged_srv servicemanager:binder call;
allow ged_srv surfaceflinger:binder call;
allow ged_srv surfaceflinger_service:service_manager find;
allow ged_srv self:netlink_kobject_uevent_socket { bind create setopt read};
allow ged_srv sysfs_boot_mode:file r_file_perms;