commit 88191d855d2e8e11aa226d75ab6c93b3f188afbb
author Nick Kralevich <nnk@google.com> Thu Dec 05 22:01:12 2013 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Dec 05 22:01:12 2013 +0000
tree b3f49eff6d6adc7248912d94a5894f9d82f1b423
parent 33a5aa573395a1a541a9e5c15a26a0679868d632
parent 4afe6a07ecfe584564e26a3450f7f211c3b27e67

Merge "Fix new selinux denials."

sepolicy/mediaserver.te

diff --git a/sepolicy/mediaserver.te b/sepolicy/mediaserver.te
index 897de36..91484bb 100644
--- a/sepolicy/mediaserver.te
+++ b/sepolicy/mediaserver.te
@@ -1 +1 @@
-allow mediaserver { nvhost_writable_device }:chr_file rw_file_perms;
+allow mediaserver { nvhost_writable_device nvhost_device }:chr_file rw_file_perms;

sepolicy/surfaceflinger.te

diff --git a/sepolicy/surfaceflinger.te b/sepolicy/surfaceflinger.te
index 314ce63..82792db 100644
--- a/sepolicy/surfaceflinger.te
+++ b/sepolicy/surfaceflinger.te
@@ -1,3 +1,5 @@
 allow surfaceflinger { knv_device nvhost_writable_device }:chr_file rw_file_perms;
-allow surfaceflinger { sysfs_devices_system_cpu sysfs_devices_tegradc }:file w_file_perms;
+allow surfaceflinger { sysfs_devices_system_cpu sysfs_devices_tegradc }:file rw_file_perms;
+allow surfaceflinger sysfs_devices_tegradc:dir r_dir_perms;
+allow surfaceflinger sysfs_devices_tegradc:lnk_file { open getattr read };
 allow surfaceflinger sysfs_devices_system_cpu:dir w_dir_perms;