device_xiaomi_sm6150-common/sepolicy/vendor/init.te

dontaudit init bt_firmware_file:filesystem getattr;
dontaudit init firmware_file:filesystem getattr;

allow init per_boot_file:file ioctl;
allowxperm init per_boot_file:file ioctl { F2FS_IOC_SET_PIN_FILE };
davinci: sepolicy: Silence harmless QCOM denials Change-Id: Iad1e2c0e654a4a46da76a57ece63dc4f35761d50 2019-12-17 12:14:21 -05:00			`dontaudit init bt_firmware_file:filesystem getattr;`
			`dontaudit init firmware_file:filesystem getattr;`
sm6150-common: sepolicy: Allow ioctl to zram_swap for performance This fixes permission denied when setting F2FS_PIN_FILE. [ 46.726131] init: [libfs_mgr]Failed to set pin_file for f2fs: /data/per_boot/zram_swap: Permission denied [ 46.726151] init: [libfs_mgr]Failure of zram backing device file for '/dev/block/zram0' [ 46.726341] type=1400 audit(1601025878.312:17): avc: denied { ioctl } for comm="init" path="/data/per_boot/zram_swap" dev="dm-9" ino=4868 ioctlcmd=0xf50d scontext=u:r:init:s0 tcontext=u:object_r:per_boot_file:s0 tclass=file permissive=0 Bug: 169311165 Signed-off-by: Jaegeuk Kim <jaegeuk@google.com> Change-Id: I982f70556284ac55d659bae6aff93b84d71e67f0 2020-09-24 08:56:02 -04:00
			`allow init per_boot_file:file ioctl;`
			`allowxperm init per_boot_file:file ioctl { F2FS_IOC_SET_PIN_FILE };`