summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--android/sepolicy/gpsd.te3
-rw-r--r--android/sepolicy/hal_gnss.te1
2 files changed, 3 insertions, 1 deletions
diff --git a/android/sepolicy/gpsd.te b/android/sepolicy/gpsd.te
index 518b6166..877e9589 100644
--- a/android/sepolicy/gpsd.te
+++ b/android/sepolicy/gpsd.te
@@ -5,7 +5,7 @@ init_daemon_domain(gpsd)
net_domain(gpsd)
allow gpsd gpsd:capability { net_raw };
-allow gpsd console_device:chr_file rw_file_perms;
+allow gpsd serial_device:chr_file rw_file_perms;
# The following are needed by logwrapper to get gpsd's output
# to Android's logs.
@@ -14,3 +14,4 @@ allow gpsd shell_exec:file { execute execute_no_trans read open getattr };
allow gpsd vendor_file:file { execute execute_no_trans read open getattr };
allow gpsd devpts:chr_file { read write open getattr };
allow gpsd gpsd_exec:file { execute execute_no_trans read open getattr };
+allow gpsd vendor_shell_exec:file { execute execute_no_trans read open getattr };
diff --git a/android/sepolicy/hal_gnss.te b/android/sepolicy/hal_gnss.te
index 4bbbcb1d..3ef8cd4e 100644
--- a/android/sepolicy/hal_gnss.te
+++ b/android/sepolicy/hal_gnss.te
@@ -4,3 +4,4 @@ typeattribute hal_gnss_default hal_wifi_hostapd_server;
net_domain(hal_gnss_default)
allow hal_gnss_default hal_gnss_default:capability { net_raw };
+allow hal_gnss_default property_socket:sock_file { write };