From ac8d09538e0c2d2c6cb593354df7c05a0a92afb2 Mon Sep 17 00:00:00 2001 From: Ricardo Cerqueira Date: Wed, 6 Nov 2013 03:00:16 +0000 Subject: [PATCH] selinux: Add CM-specific file_contexts Change-Id: Ie70c59acedbb7be2f5b34a83c1d3d011f440ba05 --- sepolicy/file_contexts | 8 ++++++++ sepolicy/sepolicy.mk | 1 + 2 files changed, 9 insertions(+) create mode 100644 sepolicy/file_contexts diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts new file mode 100644 index 00000000..65e21c9a --- /dev/null +++ b/sepolicy/file_contexts @@ -0,0 +1,8 @@ +/cache/dalvik-cache(/.*)? u:object_r:dalvikcache_data_file:s0 + +############################# +# performance-related sysfs files (CM) +/sys/kernel/mm/ksm(/.*)? -- u:object_r:sysfs_writable:s0 +/sys/devices/system/cpu.*/cpufreq(/.*)? -- u:object_r:sysfs_writable:s0 +/sys/block/mmcblk0/queue/scheduler -- u:object_r:sysfs_writable:s0 + diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk index 94df225b..af929d9b 100644 --- a/sepolicy/sepolicy.mk +++ b/sepolicy/sepolicy.mk @@ -7,5 +7,6 @@ BOARD_SEPOLICY_DIRS += \ vendor/cm/sepolicy BOARD_SEPOLICY_UNION += \ + file_contexts \ seapp_contexts \ mac_permissions.xml