allow shell vendor_file:file { r_file_perms execute execute_no_trans};
|
allow shell background_service:service_manager add;
|
allow shell sysfs_cma_readable:file { read getattr open };
|
allow shell sysfs_thermal:file { read getattr open write};
|
allow shell sysfs_zram:dir search;
|
allow shell sysfs_zram:file { read getattr open };
|
allow shell proc_iomem:file { read getattr open write};
|
allow shell proc_irq:file { read getattr open write};
|
allow shell shell_data_file:sock_file { create read getattr open write};
|
allow shell proc_irq:dir {search};
|
allow shell hal_memtrack_default:binder call;
|
allow shell untrusted_app_25:process getsched;
|
set_prop(shell, system_prop)
|
allow shell cache_file:dir search;
|
allow shell cache_file:file { read getattr open };
|
allow shell configfs:dir search;
|
allow shell init_exec:lnk_file read;
|
allow shell metadata_file:dir search;
|
allow shell sysfs_devices_system_cpu:file write;
|
