Sepolicy

[DrRamm]

allow audioserver debugfs:file open;
allow audioserver debugfs:file write;
allow bootanim debugfs:file open;
allow bootanim debugfs:file write;
allow bootstat sysfs:file getattr;
allow bootstat sysfs:file open;
allow bootstat sysfs:file read;
allow cameraserver debugfs:file open;
allow cameraserver debugfs:file write;
allow charger_monitor sysfs:file getattr;
allow charger_monitor sysfs:file read;
allow charger_monitor sysfs_spmi_dev:dir open;
allow charger_monitor sysfs_spmi_dev:dir read;
allow firmware_file rootfs:filesystem associate;
allow hal_drm_default debugfs:file open;
allow hal_drm_default debugfs:file write;
allow hal_graphics_allocator_default debugfs:file open;
allow hal_graphics_allocator_default debugfs:file write;
allow hal_graphics_allocator_default sysfs:file getattr;
allow hal_graphics_allocator_default sysfs:file open;
allow hal_graphics_allocator_default sysfs:file read;
allow hal_memtrack_default debugfs:file open;
allow hal_memtrack_default debugfs:file write;
allow hal_memtrack_default sysfs:file getattr;
allow hal_memtrack_default sysfs:file open;
allow hal_memtrack_default sysfs:file read;
allow hal_usb_default debugfs:file open;
allow hal_usb_default debugfs:file write;
allow hal_wifi_default debugfs:file open;
allow hal_wifi_default debugfs:file write;
allow hal_wifi_default sysfs:file write;
allow healthd debugfs:file open;
allow healthd debugfs:file write;
allow hwservicemanager debugfs:file open;
allow hwservicemanager debugfs:file write;
allow hwservicemanager sysfs:file getattr;
allow hwservicemanager sysfs:file open;
allow hwservicemanager sysfs:file read;
allow idmap sysfs:file getattr;
allow idmap sysfs:file open;
allow idmap sysfs:file read;
allow init btnvtool_exec:file execute_no_trans;
allow init debugfs:file write;
allow init firmware_file:dir create;
allow init rootfs:file execute_no_trans;
allow init shell_exec:file execute_no_trans;
allow init vfat:dir mounton;
allow installd debugfs:file open;
allow installd debugfs:file write;
allow keystore debugfs:file open;
allow keystore debugfs:file write;
allow lmkd sysfs:file write;
allow logd sysfs:file getattr;
allow logd sysfs:file open;
allow logd sysfs:file read;
allow mediacodec sysfs:file getattr;
allow mediacodec sysfs:file open;
allow mediacodec sysfs:file read;
allow mediaextractor sysfs:file getattr;
allow mediaextractor sysfs:file open;
allow mediaextractor sysfs:file read;
allow mediametrics sysfs:file getattr;
allow mediametrics sysfs:file open;
allow mediametrics sysfs:file read;
allow mm-pp-daemon sysfs:file getattr;
allow mm-pp-daemon sysfs:file open;
allow mm-pp-daemon sysfs:file read;
allow mm-pp-daemon system_prop:property_service set;
allow mpdecision sysfs:file getattr;
allow mpdecision sysfs:file read;
allow mpdecision system_data_file:dir add_name;
allow mpdecision system_data_file:dir remove_name;
allow mpdecision system_data_file:dir write;
allow mpdecision system_data_file:sock_file create;
allow mpdecision system_data_file:sock_file unlink;
allow mpdecision system_data_file:sock_file write;
allow netd debugfs:file open;
allow netd debugfs:file write;
allow qti_init_shell shell_exec:file getattr;
allow qti_init_shell shell_exec:file read;
allow qti_init_shell sysfs:file write;
allow qti_init_shell system_data_file:file getattr;
allow qti_init_shell system_data_file:file unlink;
allow qti_init_shell system_data_file:file write;
allow qti_init_shell toolbox_exec:file execute;
allow qti_init_shell toolbox_exec:file execute_no_trans;
allow qti_init_shell toolbox_exec:file getattr;
allow qti_init_shell toolbox_exec:file open;
allow qti_init_shell toolbox_exec:file read;
allow servicemanager qti_init_shell:dir search;
allow servicemanager qti_init_shell:file open;
allow servicemanager qti_init_shell:file read;
allow servicemanager qti_init_shell:process getattr;
allow servicemanager sysfs:file getattr;
allow servicemanager sysfs:file open;
allow servicemanager sysfs:file read;
allow shell kernel:system syslog_read;
allow shell sysfs:file getattr;
allow shell sysfs:file open;
allow shell sysfs:file read;
allow storaged debugfs:file read;
allow system_server alarm_boot_prop:file getattr;
allow system_server alarm_boot_prop:file open;
allow system_server alarm_boot_prop:file read;
allow system_server mpdecision:unix_stream_socket connectto;
allow system_server qti_init_shell:binder call;
allow toolbox ctl_default_prop:property_service set;
allow toolbox init:fifo_file getattr;
allow toolbox init:fifo_file write;
allow toolbox init:unix_stream_socket connectto;
allow toolbox property_socket:sock_file write;
allow toolbox sensors_prop:property_service set;
allow toolbox sf_lcd_density_prop:property_service set;
allow toolbox sysfs:file getattr;
allow toolbox sysfs:file open;
allow toolbox sysfs:file read;
allow toolbox sysfs:file setattr;
allow toolbox sysfs_battery_supply:dir search;
allow toolbox sysfs_battery_supply:file getattr;
allow toolbox sysfs_battery_supply:file setattr;
allow toolbox sysfs_graphics:file getattr;
allow toolbox sysfs_graphics:file open;
allow toolbox sysfs_graphics:file read;
allow toolbox sysfs_graphics:file setattr;
allow toolbox sysfs_spmi_dev:dir search;
allow toolbox system_prop:property_service set;
allow toolbox toolbox:capability chown;
allow toolbox toolbox:capability dac_override;
allow toolbox toolbox:capability fowner;
allow toolbox toolbox:capability fsetid;
allow toolbox usf_data_file:file getattr;
allow toolbox usf_data_file:file setattr;
allow tzdatacheck sysfs:file getattr;
allow tzdatacheck sysfs:file open;
allow tzdatacheck sysfs:file read;
allow vdc sysfs:file getattr;
allow vdc sysfs:file open;
allow vdc sysfs:file read;
allow vndservicemanager sysfs:file getattr;
allow vndservicemanager sysfs:file open;
allow vndservicemanager sysfs:file read;
allow webview_zygote debugfs:file open;
allow webview_zygote debugfs:file write;
allow webview_zygote sysfs:file getattr;
allow webview_zygote sysfs:file open;
allow webview_zygote sysfs:file read;
allow zygote debugfs:file getattr;
allow zygote debugfs:file open;
allow zygote debugfs:file write;