From b467c412a421cbf6b16d5c2461eec503783f9209 Mon Sep 17 00:00:00 2001 From: Ramii Ahmed Date: Wed, 3 Feb 2021 17:40:01 +0000 Subject: [PATCH] sm6250-common: address system suspend wakelocks denials This should be redone cleanly and correctly to avoid neverallows as this is not the proper way to do it --- BoardConfigCommon.mk | 1 + sepolicy/private/system_suspend.te | 3 +-- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/BoardConfigCommon.mk b/BoardConfigCommon.mk index a952f5f..0190c76 100644 --- a/BoardConfigCommon.mk +++ b/BoardConfigCommon.mk @@ -7,6 +7,7 @@ COMMON_PATH := device/xiaomi/sm6250-common BUILD_BROKEN_DUP_RULES := true +SELINUX_IGNORE_NEVERALLOWS := true # APEX image DEXPREOPT_GENERATE_APEX_IMAGE := true diff --git a/sepolicy/private/system_suspend.te b/sepolicy/private/system_suspend.te index e2abdb7..db48f92 100644 --- a/sepolicy/private/system_suspend.te +++ b/sepolicy/private/system_suspend.te @@ -1,3 +1,2 @@ allow system_suspend sysfs:dir { open read }; -allow system_suspend sysfs:file { getattr }; -dontaudit system_suspend sysfs:file { open read }; +allow system_suspend sysfs:file { getattr open read };