rockchip: sepolicy: minor update to supress logging

Signed-off-by: hmz007 <hmz007@gmail.com>
This commit is contained in:
hmz007
2025-04-17 16:57:27 +08:00
parent 9763cafa83
commit e51d722c37
19 changed files with 79 additions and 4 deletions
@@ -9,3 +9,23 @@ allow pq_init sysfs:file { read };
allow pq_init sysfs_dev:file { read open };
allow pq_init device:dir { search open read };
allow pq_init gpu_device:chr_file { open read write getattr ioctl map };
allow pq_init block_device:dir r_dir_perms;
allow pq_init baseparameter_block_device:blk_file rw_file_perms;
allow pq_init sysfs_nvmem:file { open read getattr };
allow pq_init sysfs_gpu:file { open read getattr };
allow pq_init vendor_rkalgo_data_file:dir rw_dir_perms;
allow pq_init vendor_rkalgo_data_file:file { rw_file_perms create };
dontaudit pq_init system_data_root_file:dir { add_name create write };
dontaudit pq_init system_data_root_file:file rw_file_perms;
dontaudit pq_init default_prop:file r_file_perms;
dontaudit pq_init system_prop:file r_file_perms;
dontaudit pq_init vendor_default_prop:property_service set;
# set_prop(pq_init, vendor_default_prop)
get_prop(pq_init, vendor_default_prop)
get_prop(pq_init, vendor_tv_input_prop)
set_prop(pq_init, vendor_tv_input_prop)
get_prop(pq_init, vendor_system_public_prop)
@@ -1,8 +1,12 @@
allow hal_usb_gadget_default configfs:dir { create rmdir };
allow hal_usb_gadget_default functionfs:dir { watch watch_reads };
allow hal_usb_gadget_default sysfs:file r_file_perms;
allow hal_usb_gadget_default sysfs:dir r_dir_perms;
allow hal_usb_gadget_default sysfs:file rw_file_perms;
allow hal_usb_gadget_default sysfs_udc:dir r_dir_perms;
allow hal_usb_gadget_default sysfs_batteryinfo:dir r_dir_perms;
allow hal_usb_gadget_default sysfs_net:dir r_dir_perms;
dontaudit hal_usb_gadget_default system_prop:file r_file_perms;
get_prop(hal_usb_gadget_default, vendor_usb_prop)
get_prop(hal_usb_gadget_default, usb_control_prop)