Address comments from previous review

Let's list out the individual files, instead of allowing bulk access to all of /sys/devices/virtual/graphics/fb1 Change-Id: I0b1014dcdfd2284f7bdf759e896782e1b083f386
CyanogenMod · Jan 3, 2014 · 6263f4f · 6263f4f
1 parent 408a3e2
commit 6263f4f
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 4 deletions.
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
@@ -120,7 +120,9 @@
 /sys/module/pm_8x60/modes(/.*)?        u:object_r:sysfs_mpdecision:s0
 
 # Sysfs files used by surfaceflinger
-/sys/devices/virtual/graphics/fb1(/.*)? -- u:object_r:sysfs_surfaceflinger:s0
+/sys/devices/virtual/graphics/fb1/hpd          -- u:object_r:sysfs_surfaceflinger:s0
+/sys/devices/virtual/graphics/fb1/vendor_name  -- u:object_r:sysfs_surfaceflinger:s0
+/sys/devices/virtual/graphics/fb1/product_description       -- u:object_r:sysfs_surfaceflinger:s0
 
 # Sysfs files used by qmuxd
 /sys/devices/virtual/smdpkt/smdcntl([0-9])+/open_timeout u:object_r:sysfs_smdcntl_open_timeout:s0

diff --git a/sepolicy/ueventd.te b/sepolicy/ueventd.te
@@ -1,6 +1,3 @@
 allow ueventd { firmware_file wifi_data_file }:dir r_dir_perms;
 allow ueventd { firmware_file wifi_data_file }:file r_file_perms;
 allow ueventd sysfs_smdcntl_open_timeout:file setattr;
-
-# For /sys/devices/virtual/graphics/fb1/uevent
-allow ueventd sysfs_surfaceflinger:file rw_file_perms;